Admin portal access requires an ops user. Sign in with role ops or set MOCK_ACCESS_ROLE=ops for local development.