Hi all, My client would like to setup RBAC so that regional IT users are able to add individual computers or users to a collection, but not create or modify query-based collection membership queries, which I will be creating.
I've not spent a lot of time with RBAC, do you know if this is possible? Thanks!

