Access and mutations are enforced by the platform’s owner-only account API.
Only the app owner can manage accounts.