Delegation of Administration
Tier1Admin
can create users
ACL
OU
Tier2Admin can create
printer objects
ACL
ACL
Inheritable ACL for
user objects
ACL
User
Object
u The creation of objects can be
delegated at OU level