--- title: Domain Delegation Tab description: Domain Delegation Tab author: jamiejdt ms.assetid: 15a9bfff-e25b-4b62-9ebc-521a5f4eae96 ms.pagetype: mdop ms.mktglfcycl: manage ms.sitesec: library ms.prod: w10 ms.date: 06/16/2016 --- # Domain Delegation Tab The **Domain Delegation** tab on the **Change Control** pane provides a list of Group Policy administrators who have domain-level access to the archive and indicates the roles of each. Additionally, this tab enables AGPM Administrators (Full Control) to configure domain-level permissions for Editors, Approvers, Reviewers, and other AGPM Administrators. There are two sections on the **Domain Delegation** tab—configuration of e-mail notification and role-based delegation for Advanced Group Policy Management (AGPM) at the domain level. ## Configuration of e-mail notification The e-mail notification section of this tab identifies the Approvers that will receive notification when operations are pending in AGPM.
Setting Description

From

The AGPM alias from which notification is sent to Approvers. In an environment with multiple domains, this can be the same alias throughout the environment or a different alias for each domain.

To

A comma-delimited list of e-mail addresses of Approvers to whom notification is to be sent

SMTP server

The name of the e-mail server, such as mail.contoso.com

User name

A user with access to the SMTP server

Password

User's password for authentication to the SMTP server

Confirm password

Confirm user's password

  ## Domain-level role-based delegation The role-based delegation section of this tab displays and enables an AGPM Administrator to delegate allowed, denied, and inherited permissions for each group and user on the domain with access to the archive. An AGPM Administrator can configure domain-wide permissions using either standard AGPM roles (Editor, Approver, Reviewer, and AGPM Administrator) or a customized combination of permissions for each Group Policy administrator.
Button Effect

Add

Add a new entry to the security descriptor. Any users or groups in Active Directory can be added as Group Policy administrators.

Remove

Remove the selected Group Policy administrators from the Access Control List.

Properties

Display the properties for the selected Group Policy administrators. The properties page is the same one displayed for an object in Active Directory User and Computers.

Advanced

Open the Access Control List Editor.

  ### Additional considerations - For information about roles and permissions related to specific tasks, see the tasks under [Performing AGPM Administrator Tasks](performing-agpm-administrator-tasks.md), [Performing Editor Tasks](performing-editor-tasks.md), [Performing Approver Tasks](performing-approver-tasks.md), and [Performing Reviewer Tasks](performing-reviewer-tasks.md). ### Additional references - [User Interface: Advanced Group Policy Management](user-interface-advanced-group-policy-management.md) - [Performing AGPM Administrator Tasks](performing-agpm-administrator-tasks.md)