extended admin privs on api