Versions Compared

Version Old Version 6 New Version Current
Changes made by

Alex Barth

Alex Barth

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Components

The request string for a delegation request is must be a JSON string that contains adheres to the following properties and valuesinformation:

Property

Value

Required

Details

Timestamp

When to process the request

Yes

Must be

a valid time value. Can be set for a future time to scheduled the request.

an ISO 8601 extended format date and time in UTC and may be set to a value in the future to schedule the request.

  • Example: 2024-01-02T03:04:05.006Z

Type

The type of request

Yes

Must be a string with the following value: Delegation

Action

Action for the request

Yes

Must be one of the following approved verbs:

Add, Remove, Replace, Clear

Grant, Revoke

Path

OU targetted by the request

Yes

Must be an OU under the

department's

Department OU of the department.

  • Example: OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu

Principal

AD group in the delegation

Yes

Must be

either:

an Active Directory security group.

* (asterisk) when Action is Clear.

  • Example: EXAMPLE-ComputerAdmins

  • Example: EXAMPLE-GroupMemberManagers

Delegation

Permissions for request

Yes

Must be

either:

one of the

standard

supported delegations

: <link to delegations page>* (asterisk) when Action is Clear.

(see: Supported Delegations) and must not contain any white space.

  • Example: Computers

  • Example: GroupMembership

RequestedBy

User submitting the request

Yes

Must be the department administrator submitting the request. Validated against the

Department's

Administrators group for the department.

RequestedForEID requesting the delegationYesMust be the EID of the user who requested the delegation. Validated against active EIDs in Active Directory.

  • Example: EXAMPLE-abcd1234

Notes

Additional information

No

Text field to store information about the delegation request.

Examples

The following JSON string is an example of a valid request string:

Code Block
{
	"Timestamp":"2024-01-02T03:04:05.006Z",
	"Type":"Delegation",
	"Action":"Grant",
	"Path":"OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu",
	"Principal":"EXAMPLE-ComputerAdmins",
	"Delegation":"Computers",
	"RequestedBy":"EXAMPLE-abcd1234",
	"Notes":"This is a test delegation"
}