admin request restrictions