{"id":227,"date":"2025-08-27T14:00:15","date_gmt":"2025-08-27T14:00:15","guid":{"rendered":"https:\/\/1v0.net\/blog\/?p=227"},"modified":"2025-08-27T14:00:17","modified_gmt":"2025-08-27T14:00:17","slug":"building-a-role-based-admin-panel-in-laravel-12","status":"publish","type":"post","link":"https:\/\/1v0.net\/blog\/building-a-role-based-admin-panel-in-laravel-12\/","title":{"rendered":"Building a Role-Based Admin Panel in Laravel 12"},"content":{"rendered":"\n

One of the most powerful ways to manage user access in a modern web application is by creating an Admin Panel with role-based permissions<\/strong>. This ensures that administrators, editors, and regular users only see and control what they\u2019re allowed to. In Laravel 12<\/strong>, we can achieve this quickly and cleanly using the Spatie Laravel-Permission<\/strong> package.<\/p>\n\n\n\n

In this step-by-step guide, you\u2019ll learn how to build a Role-Based Admin Panel in Laravel 12<\/strong>. We\u2019ll cover everything from installing and configuring Spatie Permissions, creating roles and permissions, assigning them to users, setting up route protection, and even building a simple admin interface to manage everything visually.<\/p>\n\n\n\n

<\/div>\n\n\n\n

1 – Install Laravel & Spatie Permissions<\/strong><\/h2>\n\n\n\n

Start with a fresh Laravel 12 project (or use an existing one). Install Laravel using Composer:<\/p>\n\n\n

composer create-project laravel\/laravel role-based-admin<\/code><\/span><\/pre>\n\n\n
Now install the Spatie Permission package:<\/p>\n\n\n
cd role-based-admin\ncomposer require<\/span> spatie\/laravel-permission<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
This package gives you ready-to-use models and methods for roles and permissions.<\/p>\n\n\n\n
<\/div>\n\n\n\n
2 – Publish Config & Run Migrations<\/strong><\/h2>\n\n\n\n
Next, publish the configuration and migration files for the package:<\/p>\n\n\n
php artisan vendor:publish --provider=\"Spatie\\Permission\\PermissionServiceProvider\"<\/span><\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
This will create a config\/permission.php<\/code> file and migration files for roles<\/code>, permissions<\/code>, and model_has_roles<\/code>.<\/p>\n\n\n\n
Run the migrations to apply them:<\/p>\n\n\n
php artisan migrate<\/code><\/span><\/pre>\n\n\n
This adds the required database tables for role and permission management.<\/p>\n\n\n\n
<\/div>\n\n\n\n
3 – Update the User Model<\/strong><\/h2>\n\n\n\n
Add the HasRoles<\/code> trait to your User<\/code> model so users can be assigned roles and permissions:<\/p>\n\n\n
\/\/ app\/Models\/User.php<\/span>\nnamespace<\/span> App<\/span>\\Models<\/span>;\n\nuse<\/span> Illuminate<\/span>\\Foundation<\/span>\\Auth<\/span>\\User<\/span> as<\/span> Authenticatable<\/span>;\nuse<\/span> Spatie<\/span>\\Permission<\/span>\\Traits<\/span>\\HasRoles<\/span>;\n\nclass<\/span> User<\/span> extends<\/span> Authenticatable<\/span>\n<\/span>{\n    use<\/span> HasRoles<\/span>;\n\n    protected<\/span> $fillable = [\n        'name'<\/span>,\n        'email'<\/span>,\n        'password'<\/span>,\n    ];\n}<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Now, you can use methods like $user->assignRole('admin')<\/code> or $user->givePermissionTo('edit articles')<\/code>.<\/p>\n\n\n\n
<\/div>\n\n\n\n
4 – Seeding Roles & Permissions<\/strong><\/h2>\n\n\n\n
Let\u2019s create initial roles and permissions so your admin panel has a base to work with.<\/p>\n\n\n
php<\/span> artisan<\/span> make<\/span>:seeder<\/span> RolesAndPermissionsSeeder<\/span><\/code><\/span>Code language:<\/span> CSS<\/span> (<\/span>css<\/span>)<\/span><\/small><\/pre>\n\n
\/\/ database\/seeders\/RolesAndPermissionsSeeder.php<\/span>\nnamespace<\/span> Database<\/span>\\Seeders<\/span>;\n\nuse<\/span> Illuminate<\/span>\\Database<\/span>\\Seeder<\/span>;\nuse<\/span> Spatie<\/span>\\Permission<\/span>\\Models<\/span>\\Role<\/span>;\nuse<\/span> Spatie<\/span>\\Permission<\/span>\\Models<\/span>\\Permission<\/span>;\n\nclass<\/span> RolesAndPermissionsSeeder<\/span> extends<\/span> Seeder<\/span>\n<\/span>{\n    public<\/span> function<\/span> run<\/span>()<\/span>\n    <\/span>{\n        \/\/ Create roles<\/span>\n        $admin = Role::create(['name'<\/span> => 'admin'<\/span>]);\n        $editor = Role::create(['name'<\/span> => 'editor'<\/span>]);\n        $user = Role::create(['name'<\/span> => 'user'<\/span>]);\n\n        \/\/ Create permissions<\/span>\n        $manageUsers = Permission::create(['name'<\/span> => 'manage users'<\/span>]);\n        $publishPosts = Permission::create(['name'<\/span> => 'publish posts'<\/span>]);\n        $viewReports = Permission::create(['name'<\/span> => 'view reports'<\/span>]);\n\n        \/\/ Assign permissions<\/span>\n        $admin->givePermissionTo([$manageUsers, $publishPosts, $viewReports]);\n        $editor->givePermissionTo($publishPosts);\n        $user->givePermissionTo($viewReports);\n    }\n}<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
This seeder creates three roles (admin, editor, user) and three permissions. Each role is assigned different levels of access. Run the seeder:<\/p>\n\n\n
php artisan db:seed --class<\/span><\/span>=RolesAndPermissionsSeeder<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
<\/div>\n\n\n\n
5 – Protect Routes with Middleware<\/strong><\/h2>\n\n\n\n
With roles and permissions created, you can now restrict access to certain pages. Laravel\u2019s role<\/code> and permission<\/code> middleware comes from Spatie.<\/p>\n\n\n
\/\/ routes\/web.php<\/span>\n\nuse<\/span> App<\/span>\\Http<\/span>\\Controllers<\/span>\\Admin<\/span>\\DashboardController<\/span>;\n\nRoute::middleware(['auth'<\/span>,'role:admin'<\/span>])->group(function<\/span> ()<\/span> <\/span>{\n    Route::get('\/admin\/dashboard'<\/span>, [DashboardController::class, 'index'<\/span>])->name('admin.dashboard'<\/span>);\n});<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
Now, only users with the admin<\/code> role can access the admin dashboard. Others will receive a 403 Forbidden<\/code> response.<\/p>\n\n\n\n
<\/div>\n\n\n\n
6 – Create an Admin Dashboard<\/strong><\/h2>\n\n\n\n
Let\u2019s build a simple admin dashboard for demonstration:<\/p>\n\n\n
php artisan make:controller Admin\/DashboardController<\/code><\/span><\/pre>\n\n
\/\/ app\/Http\/Controllers\/Admin\/DashboardController.php<\/span>\nnamespace<\/span> App<\/span>\\Http<\/span>\\Controllers<\/span>\\Admin<\/span>;\n\nuse<\/span> App<\/span>\\Http<\/span>\\Controllers<\/span>\\Controller<\/span>;\n\nclass<\/span> DashboardController<\/span> extends<\/span> Controller<\/span>\n<\/span>{\n    public<\/span> function<\/span> index<\/span>()<\/span>\n    <\/span>{\n        return<\/span> view('admin.dashboard'<\/span>);\n    }\n}<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n
<!-- resources\/views\/admin\/dashboard.blade.php --><\/span>\n@extends('layouts.app')\n\n@section('content')\n<div<\/span> class<\/span>=\"container\"<\/span>><\/span>\n  <h1<\/span>><\/span>Admin Dashboard<\/h1<\/span>><\/span>\n  <p<\/span>><\/span>Welcome, {{ auth()->user()->name }}. You are logged in as an admin.<\/p<\/span>><\/span>\n<\/div<\/span>><\/span>\n@endsection<\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
<\/div>\n\n\n\n
7 – Admin UI for Managing Users<\/strong><\/h2>\n\n\n\n
Next, we\u2019ll create an interface for admins to assign or revoke roles for users directly in the admin panel.<\/p>\n\n\n
php artisan make:controller Admin\/UserManagementController<\/code><\/span><\/pre>\n\n
\/\/ app\/Http\/Controllers\/Admin\/UserManagementController.php<\/span>\nnamespace<\/span> App<\/span>\\Http<\/span>\\Controllers<\/span>\\Admin<\/span>;\n\nuse<\/span> App<\/span>\\Http<\/span>\\Controllers<\/span>\\Controller<\/span>;\nuse<\/span> App<\/span>\\Models<\/span>\\User<\/span>;\nuse<\/span> Illuminate<\/span>\\Http<\/span>\\Request<\/span>;\nuse<\/span> Spatie<\/span>\\Permission<\/span>\\Models<\/span>\\Role<\/span>;\n\nclass<\/span> UserManagementController<\/span> extends<\/span> Controller<\/span>\n<\/span>{\n    public<\/span> function<\/span> index<\/span>()<\/span>\n    <\/span>{\n        $users = User::with('roles'<\/span>)->get();\n        return<\/span> view('admin.users.index'<\/span>, compact('users'<\/span>));\n    }\n\n    public<\/span> function<\/span> edit<\/span>(User $user)<\/span>\n    <\/span>{\n        $roles = Role::all();\n        return<\/span> view('admin.users.edit'<\/span>, compact('user'<\/span>,'roles'<\/span>));\n    }\n\n    public<\/span> function<\/span> update<\/span>(Request $request, User $user)<\/span>\n    <\/span>{\n        $user->syncRoles($request->roles ?? []);\n        return<\/span> redirect()->route('admin.users.index'<\/span>)->with('status'<\/span>,'Roles updated!'<\/span>);\n    }\n}<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n
<!-- resources\/views\/admin\/users\/index.blade.php --><\/span>\n@extends('layouts.app')\n\n@section('content')\n<div<\/span> class<\/span>=\"container\"<\/span>><\/span>\n  <h2<\/span>><\/span>User Management<\/h2<\/span>><\/span>\n  <table<\/span> class<\/span>=\"table table-striped\"<\/span>><\/span>\n    <thead<\/span>><\/span>\n      <tr<\/span>><\/span>\n        <th<\/span>><\/span>Name<\/th<\/span>><\/span>\n        <th<\/span>><\/span>Email<\/th<\/span>><\/span>\n        <th<\/span>><\/span>Roles<\/th<\/span>><\/span>\n        <th<\/span>><\/span>Action<\/th<\/span>><\/span>\n      <\/tr<\/span>><\/span>\n    <\/thead<\/span>><\/span>\n    <tbody<\/span>><\/span>\n      @foreach($users as $user)\n      <tr<\/span>><\/span>\n        <td<\/span>><\/span>{{ $user->name }}<\/td<\/span>><\/span>\n        <td<\/span>><\/span>{{ $user->email }}<\/td<\/span>><\/span>\n        <td<\/span>><\/span>{{ implode(', ', $user->getRoleNames()->toArray()) }}<\/td<\/span>><\/span>\n        <td<\/span>><\/span><a<\/span> href<\/span>=\"{{ route('admin.users.edit',$user) }}\"<\/span> class<\/span>=\"btn btn-sm btn-outline-primary\"<\/span>><\/span>Edit<\/a<\/span>><\/span><\/td<\/span>><\/span>\n      <\/tr<\/span>><\/span>\n      @endforeach\n    <\/tbody<\/span>><\/span>\n  <\/table<\/span>><\/span>\n<\/div<\/span>><\/span>\n@endsection<\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n
<!-- resources\/views\/admin\/users\/edit.blade.php --><\/span>\n@extends('layouts.app')\n\n@section('content')\n<div<\/span> class<\/span>=\"container\"<\/span>><\/span>\n  <h2<\/span>><\/span>Edit Roles for {{ $user->name }}<\/h2<\/span>><\/span>\n  <form<\/span> method<\/span>=\"POST\"<\/span> action<\/span>=\"{{ route('admin.users.update',$user) }}\"<\/span>><\/span>\n    @csrf\n    @method('PUT')\n    @foreach($roles as $role)\n      <div<\/span> class<\/span>=\"form-check\"<\/span>><\/span>\n        <input<\/span> class<\/span>=\"form-check-input\"<\/span> type<\/span>=\"checkbox\"<\/span> name<\/span>=\"roles[]\"<\/span> value<\/span>=\"{{ $role->name }}\"<\/span>\n          {{ $user-<\/span>><\/span>hasRole($role->name) ? 'checked' : '' }}>\n        <label<\/span> class<\/span>=\"form-check-label\"<\/span>><\/span>{{ ucfirst($role->name) }}<\/label<\/span>><\/span>\n      <\/div<\/span>><\/span>\n    @endforeach\n    <button<\/span> type<\/span>=\"submit\"<\/span> class<\/span>=\"btn btn-success mt-3\"<\/span>><\/span>Update<\/button<\/span>><\/span>\n  <\/form<\/span>><\/span>\n<\/div<\/span>><\/span>\n@endsection<\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
<\/div>\n\n\n\n
Wrapping Up<\/h2>\n\n\n\n
We\u2019ve built a complete role-based admin panel in Laravel 12<\/strong>. Starting from installing Spatie Permissions, creating roles and permissions, assigning them to users, and protecting routes \u2014 all the way to creating an admin interface for managing user roles. This setup provides a strong foundation for secure, scalable user management in any application.<\/p>\n\n\n\n
If you prefer a ready-to-use implementation with authentication, roles, permissions, and a prebuilt UI, check out the Laravel Authentication & User Management Kit<\/a> from 1v0.net<\/a>.<\/p>\n\n\n\n
<\/div>\n\n\n\n
What\u2019s Next<\/h2>\n\n\n\n