 			GRANTED_ROLE
 		from
 			DBA_ROLE_PRIVS
+		where
+			1=1
 			<cfif excl_admin is "true">
-				where GRANTED_ROLE not in (#listqualify(ebij,"'",",")#)
+				and GRANTED_ROLE not in (#listqualify(ebij,"'",",")#)
+			</cfif>
+			<cfif len(role_srch) gt 0>
+				and GRANTED_ROLE like '%#ucase(role_srch)#%'
 			</cfif>
 		group by
 			GRANTED_ROLE

			<option <cfif excl_admin is "true">selected="selected"</cfif> value="true">exclude</option>
		</select>

		<br><input type="submit" value="filter">
	</form>
	<cfquery name="roles" datasource="uam_god">

	<cfparam name="excl_locked" default="">
	<cfparam name="excl_pub_usr" default="true">
	<cfparam name="excl_admin" default="true">
	<cfparam name="role_srch" default="">
	<cfparam name="usr_srch" default="">

	<form method="get" action="access_report.cfm">
		<label for="excl_locked">Locked?</label>
		<select name="excl_locked">
