Custom admin actions require special attention. Django is not familiar with them, so it can’t restrict access to them by default. A custom action will be accessible to any admin user with any permission on the model . Using this action, a staff user can mark one or more users, and activate them all at once.