You can trust .Contains() - that it's not selecting "admin" out of "Super Admin" it's looking for "Super Admin". You can trust string[] Roles = System.Web.Security.Roles.GetRolesForUser(); gets onlyt the current users roles