Jesse, I believe you could do it either way, but I'd go with a single group and accounting_group_user set to the user name. This gives you more flexibility later to split the groups into, e.g. dev and prod. Thanks, BC -- Ben Cotton main: 888.292.5320 Cycle Computing Better Answers. Faster. http://www.cyclecomputing.com twitter: @cyclecomputing