An administration portal of an Internet threat protection security server, including: control elements allowing a user of a network to access respective services performed by said Internet threat protection security server, said control elements including: (i) a mail control element providing access to a search service to search emails that have been processed by the security server; (ii) a spam control element providing access to one or more of filter, release, search, blacklisting and whitelisting services; (iii) a malware control element providing access to one or more of malicious email filter, release and search services; and (iv) a web browser control element providing access to HTTP response filter and report services; and an administration module for maintaining permission attributes for users of the network, said attributes defining access to said control elements (312 to 318); and having a delegation hierarchy wherein a Network Operations Center, NOC, of a managed security service provider can set a permission attribute for a user or group of users to administrator, and the user or group of users with an administrator permission attribute can set another user or group of users to have a user permission attribute, wherein the attributes are respectively associated with said control elements (312 to 318) and each have associated capability levels defining a level of access for the respective services, and the capability level determines whether the user is allowed to set parameters for the associated services, and determines interface components viewable and accessible by the user on an interface generated by the portal. control elements allowing a user of a network to access respective services performed by said Internet threat protection security server, said control elements including: (i) a mail control element providing access to a search service to search emails that have been processed by the security server; (ii) a spam control element providing access to one or more of filter, release, search, blacklisting and whitelisting services; (iii) a malware control element providing access to one or more of malicious email filter, release and search services; and (iv) a web browser control element providing access to HTTP response filter and report services; and (i) a mail control element providing access to a search service to search emails that have been processed by the security server; (ii) a spam control element providing access to one or more of filter, release, search, blacklisting and whitelisting services; (iii) a malware control element providing access to one or more of malicious email filter, release and search services; and (iv) a web browser control element providing access to HTTP response filter and report services; and an administration module for maintaining permission attributes for users of the network, said attributes defining access to said control elements (312 to 318); and having a delegation hierarchy wherein a Network Operations Center, NOC, of a managed security service provider can set a permission attribute for a user or group of users to administrator, and the user or group of users with an administrator permission attribute can set another user or group of users to have a user permission attribute, wherein the attributes are respectively associated with said control elements (312 to 318) and each have associated capability levels defining a level of access for the respective services, and the capability level determines whether the user is allowed to set parameters for the associated services, and determines interface components viewable and accessible by the user on an interface generated by the portal.