restrict access to entities to administrators only.