I am working in a k-12 enviornment where we need to allow printing from any installed printer (easy enough) but only allow certain user groups the ability to install a printer to begin with (preferably from <server>/ipp web interface for simplicity).

ACL set up on iManager 2.7.0
iPrint client versions range from 4.24 to 4.32
iPrins server service is running 4.32

So far using ACL's (with Secure Printing Enabled) I can inhibit or allow both (print and install) together, however I cannot seem to give a group print rights w/o install rights. Please offer any aid available.

Also using Policy Rollouts through ConsoleOne which function, however need to allow alternate iPrint printers not nessisarily in the policy for certain users.

Thank you for your time,