Admin users: admin (full access) and reports (enrolled-only).