Hi @freddieptf could you confirm whether it would be sufficient to check is user is an admin in fetchCreationDetails

if (!isAdmin) {
      throw Error(`User ${username} is not an Admin. Admin access required to use this application`);
    }

I'm wondering is there any functionality in the UMT that a regular user can use ? Or is it the case that all actions require admin access ?

User managers aren't admins, they have a user manager role attached to them which has the permissions required to create users/places. What we need to check is that the user logging in has these permissions. You can have a look at the echis config to see how the role is configured.