The Delegation model in UPA enables you to define who can use Universal Policies, OUs, and GPOs. It allows to define who can view, create, modify, delete domains, export to, or import Universal Policies from the Active Directory. Depending on the permissions defined for a role, the user gets access to and can perform the actions on the defined selected list, such as UPs, OUs, and GPOs.