option to only allow primary users access to the self-service server