rm volumes section and add admin permission for access_and_security section