No user PM access

I can confirm everything works as expected as soon as the user is tl1.