update to scope to account for user with limited privileges