app role privileges
Allow non-admin access