This figure shows the delegation flow. At the top is the Oracle Internet Directory Superuser (cn=orcladmin). From the superuser there is an arrow labeled "created" pointing to the Subscriber Administrator. From the Subscriber Administrator there is an arrow labeled "Delegates Oracle Context administration to" pointing to a group of Oracle Context Administrators. From the Oracle Context Administrators there is an arrow labeled "Delegates Application Server administration to" pointing to a group of IAS Administrators. There is a note that you can have an IAS Administrator for each component. From the IAS Administrators there is an arrow labeled "Delegates user and group administration" pointing to a group of User and Group Administrators. There is an arrow from the User and Group Administrators pointing back to User and Group Administrators labeled "These administrators can also grant user and group administrator privileges to other users."