I'd like to see a "role scope" I believe the best and most flexible approach would be to allow to assing roles in a scope. A scope could be a User Group, or a Page or a Portal, ..... That would allow your scenario, and many more. I don't believe it would a big change in the portal code. The biggest effort to get there is the admin UI to manage the role memberships. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3978000#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...