Admin accounts only. Access is enforced server-side and by RLS.