I want to be able to include a page allowing specified users (ie: a manager at the company whose intranet site this system will be used) to add/remove users whom are allowed to use resources, HOWEVER, I only want him to be able to add/remove users, and put them in a limited range of groups (ie: staff, sales, etc..), NOT to be able to assign/change admin privileges, preferable not be able to change all users, etc, etc, etc..
If you look at the current user management ui, you'll not that is calls (among other things) manage_addUser. You can reimplement the user management interface that you want using DTML Documents and Methods. Of course, at some point you'll also need to call manage_addUser: <!--#call manage_addUser(some_parms_in_here)--> You can give the document that contains this call the Manager proxy role... Hope this helps, --Rob