diff --git a/deps/rabbitmq_management/priv/www/js/dispatcher.js b/deps/rabbitmq_management/priv/www/js/dispatcher.js
index 8e54f45b9b..dad6d38b8b 100644
--- a/deps/rabbitmq_management/priv/www/js/dispatcher.js
+++ b/deps/rabbitmq_management/priv/www/js/dispatcher.js
@@ -274,10 +274,15 @@ dispatcher_add(function(sammy) {
             if (sync_delete(this, '/operator-policies/:vhost/:name'))
                 update();
         });
-      path('#/limits', {'limits': '/vhost-limits',
-                        'user_limits': '/user-limits',
-                        'users': '/users',
-                        'vhosts': '/vhosts'}, 'limits');
+      let datamodel = {
+        'limits': '/vhost-limits',
+        'user_limits': '/user-limits',
+        'vhosts': '/vhosts'
+      }
+      if (ac.isAdministratorUser()) {
+        datamodel['users'] = '/users'
+      }
+      path('#/limits', datamodel, 'limits');
 
       sammy.put('#/limits', function() {
           var valAsInt = parseInt(this.params.value);
diff --git a/deps/rabbitmq_management/priv/www/js/tmpl/limits.ejs b/deps/rabbitmq_management/priv/www/js/tmpl/limits.ejs
index 56d6e11b93..01b1ed037c 100644
--- a/deps/rabbitmq_management/priv/www/js/tmpl/limits.ejs
+++ b/deps/rabbitmq_management/priv/www/js/tmpl/limits.ejs
@@ -137,6 +137,7 @@
   </div>
 </div>
 
+<% if(ac.isAdministratorUser()) { %>
 <div class="section administrator-only" id="set-user-limits">
   <h2>Set / update a user limit</h2>
   <div class="hider">
@@ -175,3 +176,5 @@
       </form>
   </div>
 </div>
+<% } %>
+