I 'd like to limit the access to a tool or function with named expressions. The Connection usergroup seems to be a good criteria. Is it possible to evaluate the Connection usergroup of the current connection user? best regards, Daniel