some docs suggestions around administrative access