fix user abilities for institution admin