REBA - PowerShell scripts - Delegation

The following scripts are provided for submitting a delegation request and removing a pending delegation request:

  • Add-ADDelegationRequest.ps1 - submits a new delegation request for a department

  • Remove-ADDelegationRequst.ps1 - remove a pending delegation request for a department

Submit a request

Modify then run the following command to submit a new delegation request: 

The following example submits a request to grant the Computer delegation to the EXAMPLE-ComputerAdmins on the OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu organizational unit. The example must be run by a department administrator in the EXAMPLE department.

.\Add-ADDelegationRequest.ps1 -Department 'EXAMPLE' -Action 'Grant' -Delegation 'Computer' -Principal 'EXAMPLE-ComputerAdmins' -Path 'OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu'

 

Cancel a pending request

Modify then run the following command to cancel a pending delegation request: 

The following example removes a pending request to grant the Computer delegation to the EXAMPLE-ComputerAdmins on the OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu organizational unit. The example must be run by a department administrator in the EXAMPLE department.

The Department parameter is required and all other parameters are optional. Each parameter filters the list of pending requests to only those matching the provided parameters. The script will prompt the user to confirm removal of each pending request that matches the provided parameters.

.\Remove-ADDelegationRequest.ps1 -Department 'EXAMPLE' -Action 'Grant' -Delegation 'Computer' -Principal 'EXAMPLE-ComputerAdmins' -Path 'OU=Computers,OU=EXAMPLE,OU=Departments,DC=austin,DC=utexas,DC=edu'

Â