diff --git a/api/_routers/97-require-repo-admin.go b/api/_routers/97-require-repo-admin.go
index 57cd1e7893cce689227d835e50bbbf3b94a84b4b..1b596e3c242bfdd3384d46178250ce215da536a0 100644
--- a/api/_routers/97-require-repo-admin.go
+++ b/api/_routers/97-require-repo-admin.go
@@ -17,7 +17,7 @@ func RequireRepoAdmin(generator GeneratorWithUserFn) GeneratorFn {
 				panic(errors.New("safety check failed: Repo admin access check received empty user ID"))
 			}
 
-			if !util.IsGlobalAdmin(user.UserId) {
+			if !util.IsGlobalAdmin(user.UserId) || user.IsShared {
 				return _responses.AuthFailed()
 			}