Hi Mike, you are right about primary group for a user. It is most natural for permissions to ascertain the primary group of a user. What is the best way to support this notion in Expresso? What you think about adding a new field to UserInfo, to persist this new attribute of "primary group"? Larry