more endpoint access needed?