Object Creation Quotas
You can assign an object creation quota to each principal. This assignment allows you to control the number of registry objects that can be created by the principal. If you allow users to create their own groups, for example, you can use this quota to limit the total number of groups they can create. The default for the object creation quota is unlimited, meaning that no limits are placed on the number of objects the principal can create. A value of 0 (zero) prohibits the principal from creating any registry objects.
Each time a principal creates a registry object, the principal's object creation quota is decremented by 1. When the object creation quota reaches 0, the principal is prohibited from creating registry objects unless you reset the object creation quota to a number other than 0 by using the dcecp principal modify command. Note that, when an object that is created by a principal is deleted, the principal's object creation quota is not incremented.
Use the dcecp principal show command to view principals' current object creation quotas. This command displays the total number of objects that the principal is allowed to create at the current time; that is, the original quota minus the number of objects created by the principal.