---
id: 5888
title: "Resource-Based Constrained Delegation: AD Security 101"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/ad-security-101-resource-based-constraint-delegation/"
published_at: "2023-06-23T15:14:36Z"
tags: ["active-directory", "privilege-escalation", "kerberos", "least-privilege", "rbcd", "delegation"]
phying_url: "https://phying.com/item/5888"
lang: en
---

# Resource-Based Constrained Delegation: AD Security 101

## Summary

Resource-based constrained delegation (RBCD) lets admins delegate access per resource via msDS-AllowedToActOnBehalfOfOtherIdentity, reducing privilege risk—but misconfiguration can be abused.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2023-06-23T15:14:36Z
- **Original:** https://www.semperis.com/blog/ad-security-101-resource-based-constraint-delegation/
- **Phying News:** https://phying.com/item/5888