How are administrative rights delegated in Defender?
Please note: this article, and its attached document, help explain Defender permissions at an attribute level, and require an in-depth knowledge of Active Directory permissions and security. Knowledge Article 118639, How to delegate permissions in Defender using the Delegation Wizard, provides a step-by-step on how to use the Defender Delegated Administration wizard, and thus simplifies the process.
Please see the attached "43578_Defender_Permissions.doc" for specifics related to Defender attributes in Active Directory and delegating permissions.
For complete instructions on usage of the Defender Delegated Administration wizard, please refer to the Defender Delegated Administration User Guide which can be downloaded here: Defender - Technical Documentation.
Information on troubleshooting delegation issues is available in Knowledge Article 61513, Error in logs: "Failed to write statistics Session ID xxxxxxxx".