Administrative controls require server-side accounts, roles, and audit logging.
There is no authentication or authorization layer in this deployment. User, role, model, and system-management controls are intentionally not exposed as if they were protected.