Page Comparison

Summary

The Delegation request type of Request By Attribute process allows enables a department administrator modify to modify permissions on an organizational units unit in the a department 's OU in the Austin OU. A department administrator can submit a delegation request to grant or revoke one of the defined permissions sets called delegations to an existing group in Active Directory. The supported delegationsare documented defined on the following page:

• Supported Delegations

Delegation Request String

The request string for a delegation request is a JSON string that contains the following properties: 

• Delegation Request String

Delegation Result String

The result string for a delegation request is a JSON string that contains the following properties: 

• Delegation Result String

Scripts

The Active Directory team maintains a set of PowerShell scripts at https://github.austin.utexas.edu/eis1-aad/RequestsByAttribute to assist department administrators with this process.

• New-ADDelegationRequest.ps1 - creates a new delegation request for a department
• Remove-ADDelegationRequst.ps1 - remove a pending delegation request for a department