Does this plugin only allow those with building auth to activate the switch?
Yes, it's a config option, enabled by default.