diff --git a/ZB.MOM.WW.Secrets/Directory.Build.props b/ZB.MOM.WW.Secrets/Directory.Build.props
index 3d9b855..456ba04 100644
--- a/ZB.MOM.WW.Secrets/Directory.Build.props
+++ b/ZB.MOM.WW.Secrets/Directory.Build.props
@@ -5,7 +5,7 @@
enable
enable
latest
- 0.1.0
+ 0.1.1
true
README.md
diff --git a/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Ui/SecretsAuthorization.cs b/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Ui/SecretsAuthorization.cs
index 719885e..df96355 100644
--- a/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Ui/SecretsAuthorization.cs
+++ b/ZB.MOM.WW.Secrets/src/ZB.MOM.WW.Secrets.Ui/SecretsAuthorization.cs
@@ -1,4 +1,5 @@
using Microsoft.AspNetCore.Authorization;
+using ZB.MOM.WW.Auth.Abstractions.Roles;
using ZB.MOM.WW.Auth.AspNetCore;
namespace ZB.MOM.WW.Secrets.Ui;
@@ -46,8 +47,13 @@ public static class SecretsAuthorization
/// Role that grants secret value reveal (satisfies both and ).
public const string RevealRole = "secrets-reveal";
- /// Administrator role that satisfies every secrets policy.
- public const string AdminRole = "administrator";
+ ///
+ /// Administrator role that satisfies every secrets policy. Uses the family's canonical
+ /// role name ("Administrator") so an existing
+ /// admin principal satisfies the secrets policies without a separate mapping. Role-claim
+ /// values are compared case-sensitively, so the exact canonical spelling matters.
+ ///
+ public const string AdminRole = nameof(CanonicalRole.Administrator);
///
/// Registers the and policies on the