Can i set security on collections in a way that someone is only able to delete an objects within the collections ?

Sure, see http://technet.microsoft.com/en-us/library/bb632791.aspx (Delete Resource).

thanks for the reply. We have more then 100 collections, so i don't want to set this right for every collection. is it ok to set the security "delete resource" on the Collection folder ? or is the user then also able to delete the collection itself ?

Yes, you can assign these permission under the classes section on the Collection hive.Regards, Madan

You can go to the parent collection which is collection and set the rights since it is class security and which is applicable to all collections under it. You can also configure these rights in better way Via security rights node from SCCM console---users or rights. In simple class rights = all nodes of a specific class instance rights = only to specific collection security rights---->http://technet.microsoft.com/en-us/library/cc181371.aspx How to Assign Rights for Objects to Users and Groups --> http://technet.microsoft.com/en-us/library/bb680648.aspx //Eswar Koneti @ http://eskonr.wordpress.com/

You can go to the parent collection which is collection and set the rights since it is class security and which is applicable to all collections under it. Instance security rights are not passed to child collections.

Yup, that is what i meant was but Yes,instance security rights are only to particualr collection. Its ,my Bad. In simple class rights = all nodes of a specific class instance rights = only to specific collection //Eswar Koneti @ http://eskonr.wordpress.com/

I am having a similar issue. And following what I'm reading here is not working. I have a collection called All Applications, inside of this collection, I have over 100 collections specific to individual apps. If I grant Site specific rights, the rights flow down. But they also give that user or group rights to see every collection. Not just the ALL Applications collection/sub collections. My only other option seems to be setting rights at each sub-collection level of, again, over 100 different collections. Please tell me that I'm missing something here. Thanks.

Brian Mason had a session in MMS 2010 on how to set security in SCCM. That session is on the MMS 2010 DVD, and i remember seeing it on the WEB somewhere. Sorry for not having more details, you will have to Bing in somehow. this is Brian's Myitforum (http://www.myitforum.com/contrib/default.asp?cid=7484), may be he point you to the right direction from here.

Hi Amnon - I'll see you at our next user group meeting! I have a video on our user group site showing how you can carve rights between server admins and desktop admins: http://www.mnscug.org/sccm-2007-related-posts/117-scoping-the-software-update-role.html - it's all about class\instance permissions. Can't wait for CM12 & RBAC! Until then, maybe the video can get folks going for CM07.Microsoft MVP - SCCM