new hierarchial access controls and the ability to disable settings changes