user permission

It's possible, but I think differently than you are expecting. Before I go further, are you familiar with creating administrative partitions in the GUI, which allow by object and by role what a user can see/change? It'd be a worthwhile exercise to explore that first. If that doesn't meet your needs, then you're looking at a custom application (web-based or desktop) that will restrict what a user can see based on the options you control through iControl interface/method calls. This application would exist off-box, either on a server or on a desktop. There are some examples in perl linked here: http://devcentral.f5.com/wiki/default.aspx/iControl/Perl.html Click Here