IDEA:
1. Create a new Tab within the properties of user within the web console called Attribute Viewer / Editor that emulates the Attribute Editor tab found in AD User and Computers
2. Create a View Power and an Edit Power
3. If user has the View power then when they click on that Tab they should be able to view all the attributes of the user in AD
4. If user has the Edit Power then from that page, they should be able to pick an attribute and edit it.
5. If the User does not have either power, then the Tab is not available to them
6. If the Tab has been removed in the configuration properties screen, then regardless of whether the power is or is not present, the Tab is not revewaled
DESIGN CONSIDERATION:
The model for this capability should be the existing functionality in the ADUC Native Tool. It should conceptually act the same as the native tool but bounded by the delegation model of DRA. This would be a "power" tool of sorts and would not necessarily have all the controls of format etc.