Assign admin role during admin seed

backend/prisma/seed-admin.js

@@ -12,6 +12,33 @@ async function main() {
   const email = 'admin@bizone.id';
   const password = 'ChangeMe123!';
   const passwordHash = await bcrypt.hash(password, 10);
+  const adminPermissions = [
+    { id: 'campaigns', label: 'Manage Campaigns', icon: 'campaign', description: 'Broadcasts and outbound campaign controls.', values: { view: true, edit: true, delete: true, manage: true } },
+    { id: 'analytics', label: 'View Analytics', icon: 'monitoring', description: 'KPI, trends, and performance dashboards.', values: { view: true, edit: null, delete: null, manage: true } },
+    { id: 'settings', label: 'Edit Settings', icon: 'settings', description: 'Providers, secrets, and environment-facing settings.', values: { view: true, edit: true, delete: true, manage: true } },
+    { id: 'billing', label: 'Billing & Invoices', icon: 'payments', description: 'Plan usage, invoices, and billing visibility.', values: { view: true, edit: null, delete: null, manage: true } },
+  ];
+
+  const adminRole = await prisma.role.upsert({
+    where: { key: 'admin' },
+    update: {
+      name: 'Admin',
+      summary: 'Full access to all modules, security controls, system configuration, and account-wide actions.',
+      badge: 'Active',
+      tone: 'primary',
+      icon: 'shield_person',
+      permissionsJson: adminPermissions,
+    },
+    create: {
+      key: 'admin',
+      name: 'Admin',
+      summary: 'Full access to all modules, security controls, system configuration, and account-wide actions.',
+      badge: 'Active',
+      tone: 'primary',
+      icon: 'shield_person',
+      permissionsJson: adminPermissions,
+    },
+  });
 
   const user = await prisma.user.upsert({
     where: { email },
@@ -19,12 +46,14 @@ async function main() {
       name: 'System Admin',
       passwordHash,
       status: 'active',
+      roleId: adminRole.id,
     },
     create: {
       name: 'System Admin',
       email,
       passwordHash,
       status: 'active',
+      roleId: adminRole.id,
     },
   });