mapping(User.class)

    .baseDN(embeddedServer.getUserDnSuffix())

     .attribute("loginName", UID, true)

     .attribute("firstName", CN)

     .attribute("lastName", SN)

     .attribute("email", EMAIL)

     .readOnlyAttribute("createdDate", CREATE_TIMESTAMP)

     .readOnlyAttribute("modifyDate", MODIFY_TIMESTAMP)

.mapping(Role.class)

    .baseDN(embeddedServer.getRolesDnSuffix())

    .attribute("name", CN, true)

    .readOnlyAttribute("createdDate", CREATE_TIMESTAMP)

    .readOnlyAttribute("modifyDate", MODIFY_TIMESTAMP)

.mapping(Grant.class)

    .forMapping(Role.class)

    .attribute("assignee", "member");

IdentityQueryBuilder queryBuilder = identityManager.getQueryBuilder();

List result = queryBuilder.createIdentityQuery(User.class).getResultList();