SharePoint AD Administration provides the systems administrator authorization to delegate other managers with limited abilities to create, edit, rename, and/or delete OUs and AD properties. These delegated individuals can also have the capabilities to reset passwords, create and manage users and groups, and edit AD profiles from within a predefined OU.