Add spec around uberadmin only permission