centralized root access