Outsourcing of User Administration

I am interested to know who has outsourced the user admin function including add, change, delete of Active Directory accounts, business applications and Directory services. What controls were used to ensure that the outsourcer did not have availability to intellectual capital.