Hi,

So as far as I can see it the only table I have "control" over is the one that links Groups to Roles and IMHO the most sensible way to structure that is two columns, ROLE, GROUP.

The LDAP is in the form USER, GROUP.

Please, if you know how the SQL to generate a list of user's roles would look I'd really appreciate it?

Don't worry about Access for now, I just put that in because it's the tool I was using in case it was relevant, I can do this in TSQL on MS SQL Server too, that's no bother.

Thanks