Environment
Situation
Who is a member of the DRA Admins group by default?
What powers do members of the DRA Admins AA group have?
Resolution
Membership in the DRA Admins Assistant Admin group in Directory and Resource Administrator (DRA) allows for complete delegation over all objects DRA manages, as well as management of the DRA security model and its configuration. By default, this group includes the DRA service account you specified during installation. If you add any additional groups or user accounts to the DRA Admins Assistant Admin Group, those groups or accounts also have full control of all objects DRA manages. You should limit membership in the DRA Admins group to only those accounts that need complete access to Delegation, Policy, Automation, and Configuration management functions within DRA.
For more information, see the Administrator Guide for Directory and Resource Administrator and Exchange Administrator.
Cause
Additional Information
For more information on how to add a user or group to the DRA Admin's AA group, see NETIQKB293.