give administrators rights