A user who has been given the admin role through the object tree (entry.UserObject).

Anybody can access.

The target of a UserUserAttribute.

Only authenticated users, this includes temporary guests.

A user who 'owns' the attribute, this depends on the type of attribute.