1. create a bunch of new custom attributes and associate them to person object in FIM2. bunch them together undertwo new tabs onthe person object (when a person's recordis displayed in portal)3. create two sets of people, one set withread capability to view attributes in both new tabs, th other with update capabilities on attributes in one of the new tabs but not the otherSo what I am asking is whether you can create sets and give update/modify privs toa set for managing only certain attributes on theperson object? For example, I want only managers to be able to edit title, only people in a certain department to edit telephone information etc.thanks. Anu

Hi Anu! Sure, create the sets and then use MPR's to set attribute rights to the different sets. Finally make sure you use the PrimaryResourceRightsDataSource and the RightsLevel property in your RCDC's to hide controls users haven't been assigned rights to read or write. Here's some great examples of MPR's: Management Policy Example This is where you should get more info around RCDC's including PrimaryResourceRightsDataSource and RightsLevel: Resource Control Display Configuration XML Reference //Henrik Henrik Nilsson Blog: http://www.idmcrisis.com Company: Cortego (http://www.cortego.se)

Also... Have a look at this thread: http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/4efaeac9-af3c-4694-9a6e-e2644892a80d/ for allowing non-admin users to get access to necessary home page resources, navbar resources and search scopes.Henrik Nilsson Blog: http://www.idmcrisis.com Company: Cortego (http://www.cortego.se)