Super admin panel
Use the base admin shell at /admin for user management, impersonation guards, and template-specific dashboards.
Routes
Generated apps expose an admin area at /admin with layout and navigation suited to the template (commerce revenue, SaaS MRR, blog analytics, and so on).
Super admin role
The super_admin role bypasses most checks via the * permission. Restrict assignment to trusted operators.
Agency tier extras
SSO/SAML integration points and audit logging appear on Agency tiers with stricter admin surfaces and impersonation guards where applicable.
Protect /admin with network rules or VPNs in internal deployments in addition to RBAC.