Scope of work: There's an existing MS Access application to manage clients for a small wealth management company. The application sits on the network accessible by all company's employees. Every employee has the same level of access - they can search clients, view data, change data, add comments, etc. We need to separate levels of permission as follows: - admins will be able to access everything and make any changes - add, update, delete. - account managers will be able to view everything, but only enter data on certain screens (add comments). To-do: - add a Usergroups table (two usergroups - Admins, Account Managers) - add fields to the Employees table - Username, Password, UsergroupID - add a login - when a user first opens the application. User enters their username/password, presses the "Enter" button. The input is then validated against the Employees records. - once logged in, the Admins will use the application as it is right now. The Account Managers will have most screens disabled (read-only), except the screen where they can add/edit comments about the client.