When using the Parcel Detail Access tool, it is possible to choose an account by the Display Name, which is NOT unique, and select the wrong account. The Ban-Unban process should only allow real names, or even better, UUID keys.