I really don’t think that you would be able to do this.
http://gallery.technet.microsoft.com/Matrix-of-Role-Based-d6318b96 is a very useful resource on RBAC, as is Chris Nacker’s blog Sent from Windows Mail From: Stephen Owen Sent: Wednesday, 8 January 2014 13:27 To: [email protected] Hi all, My client would like to setup RBAC so that regional IT users are able to add individual computers or users to a collection, but not create or modify query-based collection membership queries, which I will be creating. I've not spent a lot of time with RBAC, do you know if this is possible? Thanks!

