You are exactly right. That works. Thanks.

Yes, public and dbo work. But I want to set it up for only a certain group of users with elevated privileges to identify inappropriate access.