Restrict Account Operator Group from Deleting Accounts

[CoreyWilson]

I would like to configure either the account operator group or a custom group to create, modify and disable accounts but not delete. I looked under the delegate control option and could not find an option to do it.

Any assistance would be appreciated.

Thanks

 

[CoreyWilson]

Meh! I figured it out. The problem was the group I was using was inherting rights from other built-in groups. It looks like for doing something like denying access (which I agree isnt the best thing) you are better off to create a custom group especially for that purpose.

Anyways got it working after a couple hours of fiddling which should have only taken a few minutes if I didnt overlook the obvious :-(