As User object ADMIN, you initially have all rights to all objects in the Directory tree. However, if you allow users to manage parts of the Directory tree, you need to give them the rights necessary to manage their section of the tree.