We can't use groups as the ID's are sa equivalents and we don't want users to have that kind of access. The app reads the encrypted SQL ID and password...