Thanks for the fast responses. I'm going to grab lunch, read that public keyword bit, and then see if it changes what I'm getting hung up on. Right now I was trying to solve for how both support "any" grants on some of the attributes on an application, while also not having to manage and distribute uniqueIDs for every combination of an applications' attribute. ... and that was an afternoon of interrupts. I'll follow up next week!