I notice that PAS is missing an interface which specifies how to add a role. Is that a conscious decision? Wichert. -- Wichert Akkerman <wichert at wiggy.net> It is simple to make things. http://www.wiggy.net/ It is hard to make things simple.