NDS allows you to delegate administration of a branch of the NDS tree, revoking your own management rights to that branch. One reason for this approach might be that special security requirements require a different administrator with complete control over that branch.
Delegated administration is accomplished by
WARNING: If you delegate administration to a User object and that object is subsequently deleted, there will be no objects with NDS rights to manage that branch.