Access denied occurs with any non Site Collection Administrator regardless of rights. It only occurs in this site collections, others they are able to refresh. In this particular collection they can add a BDC column to a list, edit an item and place/resolve a value in the bdc col; but when they refresh they are given an acess denied. Any thoughts on what they need read access to? This goes away if I give site admin privs (dont want to do that) or give them read only access on the web application (dont want to do that either).