Versions Compared

Version Old Version 8 New Version Current
Changes made by

Alex Barth

Alex Barth

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Components

The request string for a delegation request is must be a JSON string that contains adheres to the following properties and valuesinformation:

Property

Value

Required

Details

Timestamp

When to process the request

Yes

Must be

the UTC

an ISO 8601 extended format date and time in

one of the following formats

UTC and may be set to a value in the future to schedule the request.

ISO 8601 extended format (ex. "

  • Example: 2024-01-

01T01

  • 02T03:

02

  • 04:

03.04Z").NET JSON datetime format (ex. "\/Date(milliseconds since Unix epoch)\/")

  • 05.006Z

Type

The type of request

Yes

Must be a string with the following value: Delegation

Action

Action for the request

Yes

Must be one of the following approved verbs:

Add, Remove, Replace, Clear

Grant, Revoke

Path

OU targetted by the request

Yes

Must be an OU under the

department's

Department OU of the department.

  • Example: OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu

Principal

AD group in the delegation

Yes

Must be

either:

an Active Directory security group.

* (asterisk) when Action is Clear.

  • Example: EXAMPLE-ComputerAdmins

  • Example: EXAMPLE-GroupMemberManagers

Delegation

Permissions for request

Yes

Must be

either:

one of the

standard

supported delegations

: <link to delegations page>
  • * (asterisk) when Action is Clear.

    • (see: Supported Delegations) and must not contain any white space.

    • Example: Computers

    • Example: GroupMembership

    RequestedBy

    User submitting the request

    Yes

    Must be the department administrator submitting the request. Validated against the

    Department's

    Administrators group

    .RequestedForEID requesting the delegationYesMust be the EID of the user who requested the delegation. Validated against active EIDs in Active Directory.

    for the department.

    • Example: EXAMPLE-abcd1234

    Notes

    Additional information

    No

    Text field to store information about the delegation request.

    Examples

    The following JSON string is an example of a valid request string:

    Code Block
    {
	"Timestamp":"2024-01-02T03:04:05.006Z",
	"Type":"Delegation",
	"Action":"Grant",
	"Path":"OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu",
	"Principal":"EXAMPLE-ComputerAdmins",
	"Delegation":"Computers",
	"RequestedBy":"EXAMPLE-abcd1234",
	"Notes":"This is a test delegation"
}