!@##@$%@$#% that is for the lack of granular control. But ok, yeah probably the script is an option for us as well, I'm not sure if will be with a website but it will have to be in some way. Thanks Jim Regards Diego R. Pietruszka From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Friday, April 30, 2010 12:13 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Permissions or Profiles for TMG management console Sorry - the controls don't get that granular. What you can do (what we did for our internal selfhost) is let the helpdesk folks populate a website (SharePoint works well) and use a script running periodically on TMG to read from this site and populate the URL category overrides. This way, the helpdesk guys don't need admin access to TMG. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA SHIFT MGR Sent: Thursday, April 29, 2010 12:52 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Permissions or Profiles for TMG management console Hey, Is there a way to delegate certain tasks on TMG? (of course besides the regular 3 roles) Exactly what I'm looking for is, if there is a way to give some of my Help Desk guys access to modify 1 "URL SET". This is the thing, I have websense on my old proxy, but it doesn't work with TMG. Since for 95% of my users we have a list of approved sites, where they can access I decided to start using TMG for them because I can achieve the same thing with a URL SET. The problem is, with Websense I had a group of Help Desk supervisors with rights to approve new sites and add them to the approved list, I would like to have the same on TMG because if not I will have to finish doing the job, and that is not exactly the idea. Thanks Regards Diego R. Pietruszka