tweaked tech admin permissions