Cornell University secures a distributed AD environment
"Active Roles provided several key features right off the bat including delegation and sub-delegation, naming convention enforcement, change history and enforcing policies for AD objects."
One Identity Active Roles helps Cornell University remove the risk of unfettered admin access across all AD domains without obstructing IT activities