Delegation for user

3) Take the security group "TestGroup" and add it to the created OU "TestOU". The only security rights i want "TestGroup" to have is the following:

Create User Objects

Delete user Objects 

Apply to: This object and all descendant objects.

I appreciate any help regarding step 3 :) 

Thank you.