You are getting an "Access Denied" message from the CMS Service and not from the Portlet Container which manages the CMSAdminPortletInstance. The CMSAdminPortletInstance is getting rendered, which is what is expected, but the CMS Service does not have proper permissions set for the role in question to access CMS content. The Portal only goes as far as protecting the window, but the content inside the window is outside its control and security is managed by the actual application producing the content inside this window. In this case its the CMS Service and proper permissions need to be set on it via the CMS Admin Security console Thanks View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4068766#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...