I think this method is the simplest especially for anyone already doing authorization checks against specific usernames in their web.config. Having to specify the role provider seems counter-intuitive when you can access the role via the User object already until you realize that they use different APIs for role checks like you mention. ryan