added constraints on admin usage