Admin is visible in this stage as a planned restricted surface. App roles, Cloudflare Access and database-backed controls come later.