Administrator authority is granted from the internal allowlist. Unlisted accounts authenticate but receive no back-office privileges.