only admins can see user mgmt link