auth/opa/admin/login.rego

package ADMIN.LOGIN

default allow := false

allow {
	input.role == "admin"
}