|
3.4.6 Delegating Administrative Control
Active Directory allows you to assign permissions and grant user rights in specific ways. You can assign
permissions and grant user rights so as to delegate administrative privileges for certain objects to appropriate
individuals in an organization. You can delegate:
•
Permissions for specific organizational units to different administrators.
•
The permissions to modify specific attributes of an object in a single organizational unit.
•
The permissions to perform particular tasks in all organizational units of a domain.
|