Can all users call API’s as a shop and API’s as an operator?