diff --git a/internal/oauth/routes.go b/internal/oauth/routes.go
index 8a80f32..c429e93 100644
--- a/internal/oauth/routes.go
+++ b/internal/oauth/routes.go
@@ -144,7 +144,7 @@ func (h *OAuthHandler) tokenEndpoint(w http.ResponseWriter, r *http.Request) {
 			Name:          user.FullName,
 			Picture:       user.ProfilePicture.String,
 			Nonce:         nonce,
-			Roles:         []string{"user"},
+			Roles:         []string{"user", "admin"},
 			RegisteredClaims: jwt.RegisteredClaims{
 				Issuer: "https://cb5f-2a00-10-5b00-c801-e955-5c68-63d0-b777.ngrok-free.app",
 				// TODO: use dedicated API id that is in local DB and bind to user there