Hi people, 

I'm setting up Partner Portal for my company and I'm running into lot of questions. We have two profiles 'Manager' and 'Agent'.

Manager users can assign leads to themselves and also to agents if desired but Agent users can assign leads just to themselves. 

Manager users can see all the leads but Agent users can see unassigned leads or just the leads assigned to them.

Can you please help me with the security settings for this.

Right now, I made org wide default settings private for Lead object. And I gave sharing rules between Manager and Agent. But it doesn't seem to be good enough.

Thank you,

Raj