Excluding users and tenants API from beginner's permissions