clarification of master account access to managed objects