This might need to be open to any authenticated user, we can assume super admin creds required to edit/delete, but to list we will probably need to return the list for a normal user logged into portal.