Chapter 4. AD administration rights