Versions Compared

Version Old Version 5 New Version Current
Changes made by

Alex Barth

Alex Barth

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Components

The request string for a delegation request is must be a JSON string that contains adheres to the following properties and valuesinformation:

Property

Value

Required

Details

Timestamp

When to process the request

Yes

Must be

a valid time value. Can be set for a future time to scheduled the request.

an ISO 8601 extended format date and time in UTC and may be set to a value in the future to schedule the request.

  • Example: 2024-01-02T03:04:05.006Z

Type

The type of request

Yes

Must be a string with the following value: Delegation

Action

Action for the request

Yes

Must be one of the following approved verbs:

Add, Remove, Replace, Clear

Grant, Revoke

Path

OU targetted by the request

Yes

Must be an OU under the

department's

Department OU of the department.

  • Example: OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu

Principal

AD group in the delegation

Yes

Must be

either:

an Active Directory security group.

* (asterisk) when Action is Clear.

  • Example: EXAMPLE-ComputerAdmins

  • Example: EXAMPLE-GroupMemberManagers

Delegation

Permissions for request

Yes

Must be

either:

one of the

standard

supported delegations

: <link to delegations page>
  • * (asterisk) when Action is Clear.
    • RequestedByEID

    (see: Supported Delegations) and must not contain any white space.

    • Example: Computers

    • Example: GroupMembership

    RequestedBy

    User submitting the request

    Yes

    Must be the

    EID

    department administrator submitting the request. Validated against the

    Department's

    Administrators group for the department.

    RequestedForEID requesting the delegationNoThe EID who requested the delegation from the owner. Optional

    • Example: EXAMPLE-abcd1234

    Notes

    Additional information

    No

    Text field to store information about the delegation request.

    Examples

    The following JSON string is an example of a valid request

    ...

    string:

    Code Block
    {
	"Timestamp":"2024-01-02T03:04:05.006Z",
	"Type":"Delegation",
	"Action":"Grant",
	"Path":"OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu",
	"Principal":"EXAMPLE-ComputerAdmins",
	"Delegation":"Computers",
	"RequestedBy":"EXAMPLE-abcd1234",
	"Notes":"This is a test delegation"
}