Greg Palumbo, CNE wrote:

> Is there a documented list of which eDir property rights are needed
> for certain Helpdesk tasks? We need to be able to let our helpdesk
> do things like the following in C1, WITHOUT them getting "S" on the
> server, which is in the same container as the users in the remote
> sites:
> 1.) Associate/disassociate zen apps
> 2.) Group Memebership
> 3.) Password admin
> 4.) Intruder lockout
> 5.) GroupWise: add user, change PW, add to Dist List, etc.

You could use roll based services. For GroupWise stuff they'll need
write access to the wpdomain.db. Or isn't that covering what you want ?