diff --git a/config/routes.ts b/config/routes.ts
index 8b675ec6..2e6adb6f 100644
--- a/config/routes.ts
+++ b/config/routes.ts
@@ -9,7 +9,10 @@ const baseRoutes = [
     icon: 'icon-dashboard',
     selectedIcon: 'icon-dashboard-filled',
     defaultIcon: 'icon-dashboard',
-    access: 'canSeeAdmin',
+    // `canSeeOrgAdmin` widens to anyone the access seam grants
+    // admin-ish visibility — by default platform admin, plus
+    // whatever the routes extension chooses to allow.
+    access: 'canSeeOrgAdmin',
     component: './dashboard',
     routes: []
   },
diff --git a/src/access.ts b/src/access.ts
index 201f338d..1678b5a9 100644
--- a/src/access.ts
+++ b/src/access.ts
@@ -14,10 +14,10 @@ export default (initialState: { currentUser?: Global.UserInfo }) => {
 
   // Predicate roles, top-down by strictness:
   //   * `canSeeAdmin` — strictly platform admin (`users.is_admin`).
-  //     Gates Users, Dashboard.
+  //     Gates Users.
   //   * `canSeeOrgAdmin` — admin-style menus that work cross-org
-  //     (Resources, Models, Cluster Management). Defaults to platform
-  //     admin; extensions widen to include org admins.
+  //     (Dashboard, Resources, Models, Cluster Management). Defaults
+  //     to platform admin; extensions widen to include org admins.
   //   * `canManageCurrentOrg` — pages that only make sense inside a
   //     specific org context (member / group management). Defaults to
   //     `false`; extensions widen when both an org is selected AND