With properly scoped roles I would not be concerned