In our Domain we have specific OUs that are managed by users within their own OU.  Can We create additional Policies that allow those users to manage only their OUs without having access to the entire Domain??

Also, If I add a customer admin as a Technician can I restrict them to only manage their OU?