We are getting away from a centralized approach to application creation in
our Tree and wanting to have others in the IT organization create and
associate application objects with users. Does anyone else have
experience with this and know what rights I will need to grant these
users? I'm an administrator so usually I don't worry about this but I
want to give them only the rights that they need and nothing more. They
will be creating the application objects in one OU in the tree and then
they should be able to assciate these applications with any user or group
in the tree.