Super admin panel
Use the base admin shell at /admin for user management, impersonation guards, and template-specific dashboards.
Routes
Generated apps expose an admin area at /admin with layout and navigation suited to the template (commerce revenue, SaaS MRR, blog analytics, and so on).
Super admin role
The super_admin role bypasses most checks via the * permission. Restrict assignment to trusted operators.
Pro tier extras
Pro tier templates include the deepest admin surfaces with impersonation guards, stricter permission boundaries, and observability hooks where applicable.
Protect /admin with network rules or VPNs in internal deployments in addition to RBAC.