I am trying to set up a custom security role (based off of the Computer Import Manager http://blogs.technet.com/b/inside_osd/archive/2012/04/30/custom-role-based-administration-for-importing-computers.aspx) that has permissions to create direct memberships in collections. As far as I can tell, that would just require permissions to modify the collection rules. When looking in the security role permissions, under collection I see both "Modify" and "Modify Collection Setting". Which one of these would be appropriate to set for this right? Do I need both? Is there some other permission that is required? Or is there any documentation as to what these mean?
Jesse Schauer Windows Server Administrator II University of Idaho ITS
