Delegate a scope

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To delegate a scope

Open Authorization Manager.
In the console tree, right-click the authorization store that contains the parent application of the scope that you want to delegate, and then click Properties.
In the Properties dialog box, click the Security tab.
On the Security tab, under Authorization Manager user role, click Delegated Users.
Under Users and groups that are assigned to this role, click Add or Remove to add or remove users and groups.
In the console tree, right-click the application that contains the scope that you want to delegate, and then click Properties.

Where?
- Authorization Manager\Authorization store\Application
In the Properties dialog box, click the Security tab.
On the Security tab, under Authorization Manager user role, click Delegated Users.
Under Users and groups that are assigned to this role, click Add or Remove to add or remove users and groups.
In the console tree, right-click the scope that you want to delegate, and then click Properties.

Where?
- Authorization Manager\Authorization store\Application\Scope
In the Properties dialog box, click the Security tab.
On the Security tab, under Authorization Manager user role, click Administrator.
Under Users and groups that are assigned to this role, click Add or Remove to add or remove users and groups to which you want to assign the Administrator role.

Notes

To open Authorization Manager, click Start, click Run, and then type: azman.msc
To perform this procedure, you need to use an authorization store that contains an application, and the application must contain a scope. For more information, see Related Topics.
XML-based authorization stores, applications, and scopes do not support delegation.
If a scope within an authorization store that is stored in Active Directory contains task definitions that include authorization rules or role definitions that include authorization rules, you cannot delegate the scope.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.