Add more fine-grained permissions for admin