Enabling easier role based administration
Heres a blog by the Authorization Manager team. Authorization Manager is a free tool to make role based authorization management easier, and Business user friendly. TIP: go to the bottom of the blog for the best high level description. The remainder are scripts and tips for enablement, which are best used by an experienced administrator, and not for the faint of heart :). Heres the link:
http://blogs.msdn.com/azman/