DRA enables administrators to implement a “least privilege” permissions scheme by providing a flexible set of controls for granting granular powers to specific managed objects in the enterprise. Through these delegations, administrators can ensure that assistant administrators receive just the permissions needed to complete their specific roles and responsibilities.