Adding Tier Model for Active Directory Domain Services (#8110)

* Adding Tier Model for Active Directory Domain Services

* Adjusting tierred administration model structure

* Adding images to tier-model.md

* Moving tier-model images to correct location and addressing accessibility

* Update WindowsServerDocs/identity/ad-ds/tier-model.md

Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com>

* Updated text formatting for tier-model.md

* Apply suggestions from code review

Co-authored-by: Robin Harwood <19212983+robinharwood@users.noreply.github.com>

* Restructure of tier-model.md

* Resolving quality issues

* Apply suggestions from code review

Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com>

---------

Co-authored-by: learn-build-service-prod-05[bot] <274429479+learn-build-service-prod-05[bot]@users.noreply.github.com>
Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com>

Author: 3 people

WindowsServerDocs/identity/TOC.yml

@@ -393,6 +393,8 @@
                   href: ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/configure-kerberos-delegation-group-managed-service-accounts.md
             - name: Delegation of Control in Active Directory Domain Services
               href: ad-ds/manage/delegation-control-wizard.md
+            - name: AD DS Tier Model for tiered administration
+              href: ad-ds/tier-model.md
             - name: Best Practices for Securing Active Directory
               href: ad-ds/plan/security-best-practices/Best-Practices-for-Securing-active-directory.md
               items:

WindowsServerDocs/identity/ad-ds/manage/delegation-control-wizard.md

@@ -61,4 +61,5 @@ To use the Delegation of Control Wizard, perform the following steps:
 ## Related content
 
 - [Delegating Administration by Using OU Objects](../plan/Delegating-Administration-by-Using-OU-Objects.md)
+- [Tier Model for Active Directory Domain Services](../tier-model.md)
 - [Setting up delegated Managed Service Accounts](../../../security/delegated-managed-service-accounts/delegated-managed-service-accounts-set-up-dmsa.md)

WindowsServerDocs/identity/ad-ds/media/tier-model/cyber-attack-kill-chain.png

@@ -282,3 +282,8 @@ From any member server or workstation affected by the GPO changes, log on locall
 5.  A dialog box similar to the following should appear.
 
     ![Screenshot that shows the message that indicates the sign-in method you're using isn't allowed.](media/Appendix-F--Securing-Domain-Admins-Groups-in-Active-Directory/SAD_78.gif)
+
+## Related content
+
+- [Tier Model for Active Directory Domain Services](../../tier-model.md)
+