Delegated administration is the controlled assignment of identity-management tasks to business units, application owners, help desks or other authorized administrators. Delegates may manage a limited population, application or set of actions without receiving unrestricted platform administration.
IGA should define delegation scope, enforce separation of duties, log every action and review delegated privileges regularly.