fix mdmadmin permission problem