Again,

Call acl.AddRole( "TEMPROLE" )
acl.InternetLevel = 4
Call acl.Save

this code just adds new role but doesn't update InternetLevel if it's
being run on server.
If you run this code localy from the agents list it works fine.

So maybe there is some InternetLevel restrictions on Domino server to
change/update this specific option?
Who knows?

Thanks
Vlad

1. Agent runner should have the 'Manager' right on the database.
2. I just keep '1. Do not allow restricted operations' setting.
3. I make a schedule agent and signed with a person with manager right
of the database. This user have the 'Run unrestricted methods and
operations', 'Run restricted LotusScript/Java agents', and 'Run Simple
and Formula agents'.

The code sample is as below,
Dim sess As New NotesSession
Dim db As NotesDatabase
Dim acl As NotesACL

Set db=sess.CurrentDatabase
Set acl =db.ACL

Print "ACL Internet Level is " & Cstr(acl.InternetLevel)
If acl.InternetLevel = 3 Then
acl.InternetLevel =4
Elseif acl.InternetLevel = 4 Then
acl.InternetLevel=3
End If

Call acl.Save

I become a crazy man…

It still doesn’t work with any settings of the agent or server
document.
And as I said before – a new role is added but InternetLever is not
changed. So ACL is changed/updated by the agent run on server. So
there is no any security issues.

See sample below again:
Call acl.AddRole( "TEMPROLE" ) ‘ added after ACL save
acl.InternetLevel = 4 ‘ changed after ACL
save but still has old value after agent finish working.
Call acl.Save

So again my question is: is there some InternetLevel option
restriction on server. Or maybe I need somehow refresh DominoDirectory
after that agent is done.

Again it works fine if I run the agent locally/manually…

Thanks
Vlad