You need to ensure that members of G_HelpDesk can perform the following tasks: Reset the passwords of the sales users
You need to delegate the rights to apply PSO1 to the Active Directory objects in an organizational unit named OU1