This figure shows the delegation flow. At the top is the Oracle
Internet Directory Superuser (cn=orcladmin). From the superuser
there is an arrow labeled "created" pointing to the Subscriber Administrator.
From the Subscriber Administrator there is an arrow labeled
"Delegates Oracle Context administration to" pointing to a group of
Oracle Context Administrators. From the Oracle Context Administrators
there is an arrow labeled "Delegates Application Server administration to"
pointing to a group of IAS Administrators. There is a note that you can
have an IAS Administrator for each component. From the IAS Administrators
there is an arrow labeled "Delegates user and group administration"
pointing to a group of User and Group Administrators. There is an
arrow from the User and Group Administrators pointing back to User
and Group Administrators labeled "These administrators can also grant
user and group administrator privileges to other users."