Summary

The Delegation request type of Request By Attribute process allows a department administrator modify permissions on organizational units in the department's OU in the Austin Active Directory. Each set of permissions available for requests are defined as a delegation and documented in ServiceNow on the following page:

• Delegations Available in Austin Active Directory

Delegation Request String

The request string for a delegation request is a JSON string that contains the following properties: 

• Delegation Request String

Delegation Result String

The result string for a delegation request is a JSON string that contains the following properties: 

• Delegation Result String

Scripts

The Active Directory team maintains scripts to assist department administrators with delegation requests. The script are available at https://github.austin.utexas.edu/eis1-aad/Scripts in the Requests folder. The following scripts are available:

• New-ADDelegationRequest.ps1 - creates a new delegation request for a department
• Remove-ADDelegationRequst.ps1 - remove an outstanding delegation request for a department