Not necessarily, you could give restricted access to a client