def METHOD_NAME(self, add_acis=True):
    suffix_rdn_attr = self._basedn.split('=')[0].lower()
    suffix_obj = None
    if suffix_rdn_attr == 'dc':
        suffix_obj = create_base_domain(self._instance, self._basedn)
        aci_vals = ['dc', 'domain']
    elif suffix_rdn_attr == 'c':
        suffix_obj = create_base_c(self._instance, self._basedn)
        aci_vals = ['c', 'country']
    elif suffix_rdn_attr == 'o':
        suffix_obj = create_base_org(self._instance, self._basedn)
        aci_vals = ['o', 'organization']
    elif suffix_rdn_attr == 'ou':
        suffix_obj = create_base_orgunit(self._instance, self._basedn)
        aci_vals = ['ou', 'organizationalunit']
    elif suffix_rdn_attr == 'cn':
        suffix_obj = create_base_cn(self._instance, self._basedn)
        aci_vals = ['cn', 'nscontainer']
    else:
        # Unsupported rdn
        raise ValueError("Suffix RDN '{}' in '{}' is not supported.  Supported RDN's are: 'c', 'cn', 'dc', 'o', and 'ou'".format(suffix_rdn_attr, self._basedn))
    if add_acis:
        suffix_obj.add('aci', [
            # Allow reading the base domain object
            '(targetattr="' + aci_vals[0] + ' || description || objectClass")(targetfilter="(objectClass=' + aci_vals[1] + ')")(version 3.0; acl "Enable anyone ' + aci_vals[1] + ' read"; allow (read, search, compare)(userdn="ldap:///anyone");)',
            # Allow reading the ou
            '(targetattr="ou || objectClass")(targetfilter="(objectClass=organizationalUnit)")(version 3.0; acl "Enable anyone ou read"; allow (read, search, compare)(userdn="ldap:///anyone");)'
        ])
    return suffix_obj