backward compatibility for legacy user accounts w/o admin flag