Ranjani, You post messages pretty often. Why don't you sign up as a user? Just wondering. Basically, the way SQL Server permissions go, you have permissions as the result of being a member of a Windows group or role, right? (When I speak of permissions, I also mean that you can be denied access to something.) Then on top of these group-related permissions, you can be explicitly granted or denied extra permissions. These are usually granted/denied/revoked using the GRANT, REVOKE, and DENY statements in Transact-SQL, since most admin types use Transact-SQL to script this stuff up. The ListUserPermissions method lists the permissions of the second type: special added-on permissions granted specially for a specific user. It won't include permissions that a user has through inclusion in a role, for instance, so be careful. Also, you should realize that the Permission object can represent the fact that a user is denied access to something-- check out the Granted property. Hope this helps. Regards, Jeff Varszegi