Only operators and admins can review access requests.