manage sandboxed users