A suggestion: use a configuration property like 'hibernate.hbm2ddl.auto' to give the user the ability to determine if he wants hibernate-ogm to auto create the database.

if the users set the property to none for example, hibernate-ogm should not auto create the db and thus does not admin rights.