Admin Overview

The MakerKit Admin Panel is a built-in dashboard for managing users, organizations, and platform activity. It provides user management (ban, impersonate, role changes), organization oversight, session control, and RBAC-based permissions.

Access it at /admin with an admin account. The panel integrates with Better Auth's admin plugin and supports custom admin roles for support staff or moderators.

Getting Started

Creating Your First Admin

After running pnpm seed, use these test credentials:

• Email: admin1@makerkit.dev
• Password: testingpassword

To promote an existing user to admin:

1. Run Prisma Studio: pnpm --filter "@kit/database" prisma:studio
2. Open the users table
3. Set the role column to admin for your user
4. Sign out and back in to refresh the session

Dashboard Metrics

The admin dashboard at /admin displays four key metrics:

Core Features

User Management

The Users section (/admin/users) provides full control over user accounts:

• Search: Find users by name or email
• Filter: By role (user/admin) and status (active/banned)
• Sort: By name, email, creation date, role, or status
• Paginated results: 25 users per page

Available actions per user:

See User Management for detailed documentation.

Organization Management

The Organizations section (/admin/organizations) lets you oversee all teams:

• Search: Find organizations by name
• View Details: See organization info, members, and subscriptions
• Member Access: Click through to any member's user details

See Organization Management for detailed documentation.

Role-Based Access Control

Admin permissions are configured via RBAC in packages/rbac/src/admin-rbac.config.ts:

import { defineAdminRBACConfig } from './admin/factory';
export default defineAdminRBACConfig({
  // Default: single 'admin' role with full permissions
  // Add custom roles as needed:
  /*
  roles: {
    support: 50,    // Can help users but not delete
    moderator: 30,  // Can ban but limited access
  },
  permissions: {
    support: {
      user: ['list', 'get', 'ban'],
      session: ['list', 'revoke'],
      organizations: ['list', 'view'],
      dashboard: ['view'],
    },
  },
  */
});

See RBAC Permissions for detailed documentation on customizing admin roles.

Navigation

The admin sidebar includes:

• Dashboard (/admin) - Overview and statistics
• Users (/admin/users) - User management
• Organizations (/admin/organizations) - Organization oversight

Click "Back to Dashboard" in the sidebar header to return to your regular account.

Security Considerations

The admin panel includes multiple security layers:

1. Route Protection: Middleware blocks non-admin access to /admin/* routes
2. Server-Side Checks: requireAdmin() verifies admin status in server components
3. Action Middleware: adminActionClient protects all server actions
4. Permission Checks: withAdminPermission() enforces granular RBAC permissions
5. Impersonation Safeguards: Cannot impersonate admin users or banned accounts

For implementation details, see Extending Admin.

Next: User Management