**Delegated Access for TSD and FTO**
 
**ad.cbp.dhs.gov/AccessControl/Accounts Special Purpose/TransitionalUsers**  
[Transitional users]:  
Indirect access group:  
Field Support: Root-Transitional-Users Delegated group: SG-Delegation-Transitional-Users  
TSD: SG-TSD-ADMIN
 
**ad.cbp.dhs.gov/AccessControl/Accounts Special Purpose/Leave Of Absence Users**  
[Leave Of Absence Users]: all account should be disable  
Indirect access group:  
TSD: SG-TSD-ADMIN Delegated Group: SG-Delegation-Leave-Of-Absence-Users  
FTO: SG-FTO-ADMIN (Move users out of OU only) Delegated Group: SG-Delegation-Leave-Of-Absence-Users-Move
 
**ad.cbp.dhs.gov/AccessControl/Accounts Special Purpose/Off Network Users**  
[Off Network Users]: accounts are enabled / no enforcement configured  
Indirect access group:  
TSD: SG-TSD-ADMIN Delegated Group: SG-Delegation-Off-Network-Users