There are several built in administrative roles in config manager 2012 SP1. Today we are going to add some custom in an easy way.
First of all download and install the config manager 2012 SP1 toolkit. Here : http://www.microsoft.com/en-us/download/details.aspx?id=36213
Perform a default install.
Now start the RBA viewer utility.
Pick the security role you want to modify. You can see the actions available in the left pane.
Now select the objects that you want to modify , for example we want to have a role used for adding resources to collections. So select collection -> Modify ( for adding resources ) and modify resources for updating membership
You can find the actions by using the right side of the screen and selecting the required actions ex. Add resource
Now export the created profile.
Import the xml in config manager and assign a user with the role within the config manager console. You can now test the result for the user without knowing password of the specific user.
Just start the runas feature.
Fill in username ( no password required )
And verify the result using the console and reports button.