Hello, I have users in different subtrees. Since sudo in the original version only searches in ONELEVEL I turned it to SUBTREE and it worked. I was wondering if and why it is better to keep it ONELEVEL. Regards, Frank