all accessor-defined tag-types should have 'admin' role,