To delegate management
to someone who does not have user administration capabilities, use
direct grants of the WriteMetadata permission. For example, to delegate
management of a group named ETL Developers to a user named Tara, you
would access the Authorization tab for the
ETL Developers group, add Tara, and explicitly grant the WriteMetadata
permission to her.
Note: Do not assume that someone
who has only indirect settings on someone else's Authorization tab
has not been delegated management. The best way to check for delegation
of an identity is to check each entry in the Users and
Groups list box on that identity's Authorization tab
to see whether there are any explicit or ACT grants of the WriteMetadata
permission.