Hi Damian Cheers, that looks spot on the money! Norman > When you say "all pre-defined" roles, do you mean db_denydatareader and > db_denydatawriter as well ? > > They _may_ take precedencce over some of the others. > > Damian