diff --git a/api/kiwi_vpn_api/db/user.py b/api/kiwi_vpn_api/db/user.py
index e8f41fc..54e0d2b 100644
--- a/api/kiwi_vpn_api/db/user.py
+++ b/api/kiwi_vpn_api/db/user.py
@@ -143,7 +143,8 @@ class User(UserBase, table=True):
             # password hash mismatch
             return None
 
-        if user.has_tag(TagValue.login):
+        if not (user.has_tag(TagValue.login)
+                or user.has_tag(TagValue.admin)):
             # no login permission
             return None