...
The Delegation Via Attributes process will allow departments to manage delegations in Austin Active Directory objects. This process is composed of the following parts: the a delegation request, the requests attribute, the delegation process, a delegation processingresult, and the results attribute. The delegation request is a JSON string that contains the required properties and values for the delegation. The JSON string is written to the requests attribute on a deparment's Administrative OU. The delegation processing is comprised of a PowerShell script and the scheduled tasks that run the PowerShell script every hour. The PowerShell script process is an hourly process managed by the Active Directory team that interprets delegation requests. The delegation process will remove the original JSON string from the requests attributes and write on the department's Administrative OU and attempt to fulfill the delegation request. The delegation process will then add the output from the delegation processing process as a JSON string to the results attribute on the department's Administrative OU. Any errors encountered by the delegation process are reported in the delegation result.
Attributes
The attributes used values consume and generated by Delegation Via Attributes are stored on a departemntdepartment's Administrative OU object. A department's Administrative OU is contained under the Departments OU in the Administrative OU at the root of the domainFor example: "OU=TEST,OU=Departments,OU=Administrative,DC=austin,DC=utexas,DC=edu" would be the Administrative OU for the TEST department.
...