add users to central admin but don't allow them acces to change security or permissions? Yes, you right Dave. This is for Admins - ofcourse we can't give users access to central admin. We basically looking for a way where we can actually use one account for basic SharePoint Admin tasks. We don't want Admins giving their accounts to CA for security reasons.