Thanks for the response, I understand I can make a criteria using your method, then set that criteria in the "available for" for the catalog item, but that will restrict that item to ONLY that user criteria. I want to do the inverse, leave it available to everybody, except if the user is in company TEST, and does NOT have ITIL role.