only master can access grant/revokeAdmin