it's confusing to sometime say "user is admin" and sometime "user is client.admin" but I don't know what's best to avoid confusion