This commit is contained in:
Mike McFetridge
2026-07-20 09:23:17 -04:00
parent c1315882da
commit 72272e4006
3179 changed files with 562960 additions and 14 deletions
@@ -0,0 +1,18 @@
**Delegated Access for TSD and FTO**
**ad.cbp.dhs.gov/AccessControl/Accounts Special Purpose/TransitionalUsers**
[Transitional users]:
Indirect access group:
Field Support: Root-Transitional-Users Delegated group: SG-Delegation-Transitional-Users
TSD: SG-TSD-ADMIN
**ad.cbp.dhs.gov/AccessControl/Accounts Special Purpose/Leave Of Absence Users**
[Leave Of Absence Users]: all account should be disable
Indirect access group:
TSD: SG-TSD-ADMIN Delegated Group: SG-Delegation-Leave-Of-Absence-Users
FTO: SG-FTO-ADMIN (Move users out of OU only) Delegated Group: SG-Delegation-Leave-Of-Absence-Users-Move
**ad.cbp.dhs.gov/AccessControl/Accounts Special Purpose/Off Network Users**
[Off Network Users]: accounts are enabled / no enforcement configured
Indirect access group:
TSD: SG-TSD-ADMIN Delegated Group: SG-Delegation-Off-Network-Users