# `createClient().auth.admin.role`

```ts
createClient().auth.admin.role.set() -> /admin/set-role
```

This route updates the caller-visible global auth role stored on `athena.users.role`.

That is different from:

- `athena.member.role` for organization membership
- `athena.invitation.role` for pending invitation assignment

The admin plugin checks the global user role when deciding whether someone may call `/admin/*`.

See [Auth runtime behavior](../../runtime-behavior.md#where-role-is-stored) for the current storage model.
