list users without db access