The Active Directory team has created the Requests By Attribute process (aka REBA) which allows a department administrator administrators to programmatically submit a requestspecific requests to the Active Directory team via an attribute on a department's administrative organizational unit (OU) object. This process is These requests are processed automatically and are intended to reduce the need for department administrators to open tickets with the Active Directory team.
...
The requests attribute on a department's administrative OU functions as a queue and holds all pending requests for a department. A scheduled task runs a PowerShell script hourly that evaluates all pending requests in the requests attribute. The PowerShell script will then remove a pending request from the attribute and either perform the requested actions or deny the request. The PowerShell script will then post the results of the request to a separate attribute on the same administrative OU. The results attribute can be reviewed by department administrators to determine if the request was completed or denied. A denied request will include information about why the request was not performed.
...
Supported Request Types
The following requests request types are currently supported by REBA:
Requests By Attribute - Delegation - Department administrators can manage permissions on organizational units within a department. This process has previously been available only via a ServiceNow request.
Planned Request Types
The following requests request types are expected to be supported by REBA in the future:
...
Submitting requests and reviewing results can be performed using any LDAPv3 compliant tools. The Active Directory teams team provides full support for two methods to manage requests via REBA: the provided PowerShell scripts and the OpenLDAP tools. The Active Directory team provides best-effort support for all other methods.
...
The Active Directory team has created the following documentation for submitting requests and reviewing the results with PowerShell scripts:
OpenLDAP tools
The Active Directory team has created the following documentation for submitting requests and reviewing the results with OpenLDAP tools:
Questions
Please contact the Active Directory team via ServiceNow for any questions or assistance with this process.