This example show how to domain administrators can grant delegation to use ADAM for users who do not have administrative rights. Users can be enabled for management in specific organizational units or groups.
Identity Provisioning for AD and Office 365