in your JavaScript embedded do something like (not tested on a real system) :
<JS>
myManager = new Person( owner.get().getPropertyAsString("manager")); //instantiates the manager as a javaScript object from ldap
return(myManager.getpropertyAsString("cn")); // myManager.name should also work - but I am not sure...
</JS>
The snippet shows you a couple of things the New <Some DirectoryObject> will read the Object from the ldap entity when you provide it with the DN (this is documented in the DirectoryObject JS reference) - this is important if you need to do that.
the DirectoryObject.name is some of the default model attributes also documented the same place - and you can probably see more by looking at the nRoleModel.xml located in the <itim_home>/data directory
HTH
------------------------------
Franz Wolfhagen
WW IAM Solution Engineer - Certified Consulting IT Specialist
IBM Security Expert Labs
------------------------------