admin only can edit administrator-flag