I decided to add _DA on the end (saw in technote) and then issued "show xdir reload". Seems to be fine. Is anyone using the [DenyAccessRead] to restrict? You used to update the readers field in the Person form, correct? ...seems outdated. I'm hoping this role works. We need 2 groups to use for addressing purposes but not the remainder of the company. The DA setting is global, correct? So, what's the recommended method for restricting in address dialog? I tried just ACL but noticed that accessing the address dialog (e.g. using TO: in memo) presented a no access prompt to the user and forced exit. Needless to say, that won't work.