diff --git a/command/rakp12.cpp b/command/rakp12.cpp
index 59ca9e3..a8d5171 100644
--- a/command/rakp12.cpp
+++ b/command/rakp12.cpp
@@ -187,6 +187,12 @@
             static_cast<uint8_t>(RAKP_ReturnCode::INACTIVE_ROLE);
         return outPayload;
     }
+    if (userAccess.privilege > static_cast<uint8_t>(session::Privilege::OEM))
+    {
+        response->rmcpStatusCode =
+            static_cast<uint8_t>(RAKP_ReturnCode::INACTIVE_ROLE);
+        return outPayload;
+    }
     session->chNum = chNum;
     // minimum privilege of Channel / User / session::privilege::USER/CALLBACK /
     // has to be used as session current privilege level