• Home
• Admin Docs
• User Profile Update Delegation (SSP)

User Profile Update Delegation (SSP)

---

To allow a user/group to view and update user profile information for accounts within an OU or domain, delegate read and write permissions on user objects using the Delegation Wizard.

Steps to Delegate Control at OU or Domain Level

• Open Active Directory Users and Computers (ADUC).
• Go to the OU (or Domain container) where the user accounts are located.
• Right-click the OU/domain and select Delegate Control.
• Click Next.

Select the User or Group

• Select the user or security group to whom you want to delegate profile update permissions.
• Click Next.

Choose Custom Delegation Task

• Select Create a custom task to delegate.
• Click Next.

Select User Objects

• Under Only the following objects in the folder, select:
• User objects
• Click Next.

Configure Permissions for Profile Update (Read and Write)

• On the Permissions page, select:
• General
• Property-specific

Profile Read Access

• Select Read permissions to allow the delegated user/group to view user profile details.

Profile Write Access

• Select Write permissions to allow the delegated user/group to modify and update user profile attributes.

Finish Delegation

• Click Next.
• Review the selections.
• Click Finish to complete the delegation setup.