user should be system user only