Include user ID incase the user is specifically allowed