A method performed by a dispersed storage, DS, managing unit for authenticating a user transaction initiated within a DS network, the method comprising: receiving a first authentication request from a DS processing unit or a DS storage unit, the first authentication request containing information pertaining to a user that is requesting the user transaction; accessing a realm authentication list among a plurality of realm authentication lists stored in association with the DS managing unit, wherein the realm authentication list is organized within the plurality of realm authentication lists such that the realm authentication list is accessed using user identification information and the realm authentication list can identify what memory areas of the DS network are available to the user, and wherein the DS managing unit contains a permissions list containing user permission information that indicates which of the plurality of realm authentication lists is associated with the user; using realm information from the realm authentication list within the DS managing unit to validate the user as a valid user of the DS network; receiving a second authentication request from the DS processing unit or the DS storage unit, the second authentication request seeking authentication to process user data in a certain manner to further the user transaction; accessing access control list store information and user permission information to validate if the user transaction is a valid transaction for the user; and authorizing by the DS managing unit the continuation of the user transaction, if the user is a valid user and the user transaction is a valid transaction for the user, and enabling one of either: i) a read of user data can occur where slices of data are authorized to be extracted from the DS network and reassembled from multiple memory locations into unified and useable user data for the user; or ii) a write of user data into the DS network can occur where slices of data are authorized to be processed for data recovery and authorized to be written into the DS network across multiple different memory devices; and generating, if the user transaction is not a valid transaction, an error message and outputting the error message external to the DS managing unit and engaging security check measures in response to the validation that was unfavorable. receiving a first authentication request from a DS processing unit or a DS storage unit, the first authentication request containing information pertaining to a user that is requesting the user transaction; accessing a realm authentication list among a plurality of realm authentication lists stored in association with the DS managing unit, wherein the realm authentication list is organized within the plurality of realm authentication lists such that the realm authentication list is accessed using user identification information and the realm authentication list can identify what memory areas of the DS network are available to the user, and wherein the DS managing unit contains a permissions list containing user permission information that indicates which of the plurality of realm authentication lists is associated with the user; using realm information from the realm authentication list within the DS managing unit to validate the user as a valid user of the DS network; receiving a second authentication request from the DS processing unit or the DS storage unit, the second authentication request seeking authentication to process user data in a certain manner to further the user transaction; accessing access control list store information and user permission information to validate if the user transaction is a valid transaction for the user; and authorizing by the DS managing unit the continuation of the user transaction, if the user is a valid user and the user transaction is a valid transaction for the user, and enabling one of either: i) a read of user data can occur where slices of data are authorized to be extracted from the DS network and reassembled from multiple memory locations into unified and useable user data for the user; or ii) a write of user data into the DS network can occur where slices of data are authorized to be processed for data recovery and authorized to be written into the DS network across multiple different memory devices; and i) a read of user data can occur where slices of data are authorized to be extracted from the DS network and reassembled from multiple memory locations into unified and useable user data for the user; or ii) a write of user data into the DS network can occur where slices of data are authorized to be processed for data recovery and authorized to be written into the DS network across multiple different memory devices; and generating, if the user transaction is not a valid transaction, an error message and outputting the error message external to the DS managing unit and engaging security check measures in response to the validation that was unfavorable.