RESTful user API, admin attribute