OpenVPN Access Server gives users a nice, preconfigured .dmg, which includes a profile for connecting to the server. Unfortunatly this client is configured to be very basic, and does not allow for importing profiles.

This can be configured from the access-server, but it is often nicer to be able to do this on a per-client basis (with the "basic_client" parameter). This is how to do it on OS X.

To get status: 
/Library/Frameworks/OpenVPN.framework/Versions/Current/bin/capicli GetPreferences

 

To allow adding profiles:
/Library/Frameworks/OpenVPN.framework/Versions/Current/bin/capicli -k basic_client -v false SetPreference