this will be problematic for global admins. see function added by @twymer in https://github.com/dimagi/commcare-hq/pull/2737