diff --git a/README.md b/README.md
index 7a7d0f5..422f834 100644
--- a/README.md
+++ b/README.md
@@ -368,6 +368,28 @@ DEBUG="*" node worker.js --wtype wrk-node-http --env development --port 3000
         "ticket:r",
         "alerts:r"
       ],
+      "admin_external": [
+        "miner:r",
+        "container:r",
+        "minerpool:r",
+        "powermeter:r",
+        "temp:r",
+        "electricity:r",
+        "features:r",
+        "revenue:r",
+        "users:r",
+        "actions:r",
+        "production:r",
+        "alerts:r",
+        "cabinets:r",
+        "comments:r",
+        "explorer:r",
+        "inventory:r",
+        "reporting:r",
+        "settings:r",
+        "ticket:r",
+        "power_spot_forecast:r"
+      ],
       "dev": [
         "miner:r",
         "container:r",
@@ -393,6 +415,7 @@ DEBUG="*" node worker.js --wtype wrk-node-http --env development --port 3000
         "field_operator",
         "repair_technician",
         "read_only_user",
+        "admin_external",
         "dev"
       ]
     }
@@ -422,6 +445,7 @@ DEBUG="*" node worker.js --wtype wrk-node-http --env development --port 3000
 - `field_operator` - Read-only access with comment/ticket creation
 - `repair_technician` - Read access with action/inventory/comment management
 - `read_only_user` - Read-only access to all resources
+- `admin_external` - Read-only access to all resources, including admin-only features (users, revenue, actions, production, pool config)
 - `dev` - Developer access with elevated explorer/inventory/settings permissions
 
 **Role Management Rules:**
diff --git a/config/facs/auth.config.json.example b/config/facs/auth.config.json.example
index 259642c..93d3757 100644
--- a/config/facs/auth.config.json.example
+++ b/config/facs/auth.config.json.example
@@ -150,6 +150,31 @@
         "alerts:r",
         "work_order:r"
       ],
+      "admin_external": [
+        "miner:r",
+        "container:r",
+        "minerpool:r",
+        "powermeter:r",
+        "temp:r",
+        "electricity:r",
+        "features:r",
+        "revenue:r",
+        "users:r",
+        "actions:r",
+        "production:r",
+        "alerts:r",
+        "cabinets:r",
+        "comments:r",
+        "explorer:r",
+        "inventory:r",
+        "reporting:r",
+        "settings:r",
+        "ticket:r",
+        "power_spot_forecast:r",
+        "pool_config:r",
+        "pool_config_approve:r",
+        "work_order:r"
+      ],
       "pool_manager": [
         "pool_config:rw",
         "miner:r",
@@ -164,6 +189,7 @@
         "field_operator",
         "repair_technician",
         "read_only_user",
+        "admin_external",
         "pool_manager"
       ]
     }