reduce admin rights