Use the get-permission-descriptor operation to retrieve descriptor of domain administrator's permissions. For details on descriptors, refer to the Representation of Object Descriptor section. For details on permissions of a domain administrator, refer to the Permissions section.