Versions Compared

Version Old Version 11 New Version Current
Changes made by

Alex Barth

Alex Barth

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Components

The request string for a delegation request must be a JSON string that adheres to the following information:

Property

Value

Required

Details

Timestamp

When to process the request

Yes

Must be an ISO 8601 extended format date and time in UTC and may be set to a value in the future to schedule the request.

  • Example: 2024-01-02T03:04:05.006Z

Type

The type of request

Yes

Must be a string with the following value: Delegation

Action

Action for the request

Yes

Must be one of the following approved verbs:

Add

Grant,

Remove

Revoke

Path

OU targetted by the request

Yes

Must be an OU under the

department's

Department OU of the department.

  • Example: OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu

Principal

AD group in the delegation

Yes

Must be an Active Directory security group.

  • Example: EXAMPLE-ComputerAdmins

  • Example: EXAMPLE-GroupMemberManagers

Delegation

Permissions for request

Yes

Must be one of the

standard

supported delegations (see:

Delegations Available in Austin Active Directory

Supported Delegations) and must not contain any white space.

  • Example: Computers

  • Example: GroupMembership

RequestedBy

User submitting the request

Yes

Must be the department administrator submitting the request. Validated against the

Department's

Administrators group

.RequestedForEID requesting the delegationYesMust be the EID of the user who requested the delegation. Validated against active EIDs in Active Directory.

for the department.

  • Example: EXAMPLE-abcd1234

Notes

Additional information

No

Text field to store information about the delegation request.

Examples

The following JSON string is an example of a valid request string:

Code Block
{
	"Timestamp":"2024-01-02T03:04:05.006Z",
	"Type":"Delegation",
	"Action":"Grant",
	"Path":"OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu",
	"Principal":"EXAMPLE-ComputerAdmins",
	"Delegation":"Computers",
	"RequestedBy":"EXAMPLE-abcd1234",
	"Notes":"This is a test delegation"
}