Hi, Can we manage Role Base Access Control (RBAC) to L1 Engineer on specific TAB of user’s account properties in Active Directory Users and Computers so that Engineer can only modify  as on given permissible limit. For Ex:Get-ManagementRoleAssignment -GetEffectiveUsers | ?{$_.EffectiveUserName -eq "John Smith"} | select RoleRegardscid:image002.gif@01D14ECD.C6D1DE80