Role-based access portal (admin / staff)