Hello,
IMHO, I think the best way to proceed would be to create a separate DNN Role that will have edit acces, and then place your specific users in that role.  This way you don't grant your users any privileges in AD, but they'll have privileges in DNN.

Hope that helps!

Thanks a lot Scott and Mike. I managed to make AD Authentication working. Great Job Mike, I followed instruction in one of topics in forum. Saved my life.

Another question I have is: I have around 500 users on Active Directory, organized in Active Directory Groups. I want to set permission based on these groups on intranet.

Is there a way that I can use these Groups to create the Roles, in order not to this for every user.

Thanks a lot.

Bashkim