make sure User and AccessKey get the add action