Greetings, I just ran in to this same scenario today with a customer of mine. The user must have the permission to manage permissions for this to work the way you wish. What are the consequences of this? The current site, where you have granted this permission, the user will be able to manage permissions...