diff --git a/controller/user.go b/controller/user.go
index 7edf43b..0689cfc 100644
--- a/controller/user.go
+++ b/controller/user.go
@@ -21,7 +21,7 @@ func InitializeUserController(router *fiber.App) {
 	router.Delete("/password/:uid", security.OPSAuthorize, invalidUserPassword)
 	router.Delete("/login", security.MustAuthenticated, logout)
 	router.Put("/password", resetUserPassword)
-	router.Get("/accounts", security.OPSAuthorize, listPagedUser)
+	router.Get("/accounts", security.ManagementAuthorize, listPagedUser)
 	router.Post("/login", login)
 	router.Put("/account/enabled/state", security.OPSAuthorize, switchUserEnabling)
 	router.Post("/account", security.OPSAuthorize, createOPSAndManagementAccount)