- add attribute in User - give admin access to all profiles (isSelf or isAdmin) - add role in JWT - ...?