server-side admin update/add operation restrictions