You delegate control to one or more OUs in your AD and now you are not sure how to track or revoke rights you gave to some parts of AD, here is how to do it.
This tutorial covers Windows Server 2012 R2 and Windows 10 Pro
How to Delegate control to OU in AD
j j j