That didn't work but I figured out why - error on my part. My "Admin Priv" rule was looking to the Group field of the wrong recordset. It was looking to the recordset based on the row or record clicked instead of the session id of the user.
Thanks much for your help - I would not have gotten the Or and Else options without it.