We have the opportunity to develop a new module for geOrchestra, allowing admins to:
It's now available in master branch at /ldapadmin/console/
Some more work would be needed to get all the features of the legacy UI (/ldapadmin/privateui/), eg selecting several users and modifying their roles in a batch is not possible at the time of writing (nor planned).
Configuration instructions have been added to the ldapadmin.properties file datadir, with lots of comments. Don't miss them.