restrict admin user to create ticket