We have several different divisions (OU's) with their own printers. So DIV-A has prnt 1,2,3.... DIV-B has prnt 1,2,3..... We have hundreds of printers and I know I could go to each one and explicitly add our HELPDESK GROUP as manager to configure ACL's but is there a better way to do this. I need the HELPDESK GROUP to be able to add a user in DIV-A to the ACL on PRNT1,2 ,3.... in DIV-B.

p.s I did create an RBS role for the helpdesk which includes iprint. They can do everything but access the ACL's which we need.