Yes, each unique account would need to be whitelisted