diff --git a/Makefile b/Makefile
index 25346795..d207fcb9 100644
--- a/Makefile
+++ b/Makefile
@@ -299,7 +299,11 @@ code-check-backend-tests:
 
 code-check-userfront-tests:
 	@echo "==> userfront tests (isolated workspace)"
-	@tmp_dir="$$(mktemp -d /tmp/baron-sso-userfront-tests.XXXXXX)"; \
+	@if ! command -v flutter >/dev/null 2>&1; then \
+		echo "WARNING: flutter not found, skipping userfront tests."; \
+		exit 0; \
+	fi; \
+	tmp_dir="$$(mktemp -d /tmp/baron-sso-userfront-tests.XXXXXX)"; \
 	trap 'rm -rf "$$tmp_dir"' EXIT INT TERM; \
 	mkdir -p "$$tmp_dir/scripts"; \
 	cp scripts/sync_userfront_locales.sh "$$tmp_dir/scripts/"; \
@@ -364,9 +368,13 @@ code-check-orgfront-tests:
 
 code-check-userfront-e2e-tests:
 	@echo "==> userfront wasm playwright e2e tests (isolated workspace)"
-	@mkdir -p reports/userfront-e2e
-	@rm -rf reports/userfront-e2e/playwright-report reports/userfront-e2e/test-results
-	@tmp_dir="$$(mktemp -d /tmp/baron-sso-userfront-e2e-tests.XXXXXX)"; \
+	@if ! command -v flutter >/dev/null 2>&1; then \
+		echo "WARNING: flutter not found, skipping userfront e2e tests."; \
+		exit 0; \
+	fi; \
+	mkdir -p reports/userfront-e2e; \
+	rm -rf reports/userfront-e2e/playwright-report reports/userfront-e2e/test-results; \
+	tmp_dir="$$(mktemp -d /tmp/baron-sso-userfront-e2e-tests.XXXXXX)"; \
 	trap 'rm -rf "$$tmp_dir"' EXIT INT TERM; \
 	mkdir -p "$$tmp_dir/scripts"; \
 	cp scripts/sync_userfront_locales.sh "$$tmp_dir/scripts/"; \
diff --git a/adminfront/src/components/layout/AppLayout.tsx b/adminfront/src/components/layout/AppLayout.tsx
index d1b1fc9c..23d8a065 100644
--- a/adminfront/src/components/layout/AppLayout.tsx
+++ b/adminfront/src/components/layout/AppLayout.tsx
@@ -190,13 +190,13 @@ function AppLayout() {
 
   const navItems = React.useMemo<ShellSidebarNavItem[]>(() => {
     const items = [...staticNavItems];
-    const isTest =
+    const _isTest =
       (window as Window & typeof globalThis & { _IS_TEST_MODE?: boolean })
         ._IS_TEST_MODE === true;
     const effectiveRole = profile?.role;
 
     const isSuperAdmin = isSuperAdminRole(effectiveRole);
-    const manageableCount = profile?.manageableTenants?.length ?? 0;
+    const _manageableCount = profile?.manageableTenants?.length ?? 0;
     const showWorksmobile = canAccessWorksmobile({
       ...profile,
       role: effectiveRole ?? profile?.role,
diff --git a/adminfront/src/features/tenants/routes/TenantWorksmobilePage.tsx b/adminfront/src/features/tenants/routes/TenantWorksmobilePage.tsx
index f0e2b41f..40e7c875 100644
--- a/adminfront/src/features/tenants/routes/TenantWorksmobilePage.tsx
+++ b/adminfront/src/features/tenants/routes/TenantWorksmobilePage.tsx
@@ -194,7 +194,7 @@ export function TenantWorksmobilePage() {
   const tenantId = params.tenantId ?? HANMAC_FAMILY_TENANT_ID;
   const [orgUnitId, setOrgUnitId] = React.useState("");
   const [userId, setUserId] = React.useState("");
-  const [activeTab, setActiveTab] = React.useState("users");
+  const [activeTab, setActiveTab] = React.useState("history");
   const [userFilters, setUserFilters] = React.useState<
     WorksmobileComparisonFilter[]
   >(getDefaultUserComparisonFilters);
diff --git a/adminfront/src/features/users/UserCreatePage.tsx b/adminfront/src/features/users/UserCreatePage.tsx
index 2edb476d..c5dd9622 100644
--- a/adminfront/src/features/users/UserCreatePage.tsx
+++ b/adminfront/src/features/users/UserCreatePage.tsx
@@ -49,8 +49,7 @@ import {
   type UserCreateResponse,
 } from "../../lib/adminApi";
 import { t } from "../../lib/i18n";
-import { normalizeAdminRole } from "../../lib/roles";
-import { isSuperAdminRole } from "../../lib/roles";
+import { isSuperAdminRole, normalizeAdminRole } from "../../lib/roles";
 import {
   buildAuthenticatedOrgChartTenantPickerUrl,
   filterNonHanmacFamilyTenants,
@@ -531,10 +530,7 @@ function UserCreatePage() {
       <div className="flex h-[50vh] flex-col items-center justify-center space-y-4">
         <ShieldAlert size={48} className="text-destructive" />
         <h3 className="text-lg font-bold">
-          {t(
-            "msg.admin.common.forbidden",
-            "이 작업을 수행할 권한이 없습니다.",
-          )}
+          {t("msg.admin.common.forbidden", "이 작업을 수행할 권한이 없습니다.")}
         </h3>
         <Button onClick={() => navigate("/")}>
           {t("ui.common.go_home", "홈으로 이동")}
diff --git a/adminfront/src/features/users/UserDetailPage.tsx b/adminfront/src/features/users/UserDetailPage.tsx
index 0fd56e5c..7b473159 100644
--- a/adminfront/src/features/users/UserDetailPage.tsx
+++ b/adminfront/src/features/users/UserDetailPage.tsx
@@ -1005,10 +1005,7 @@ function UserDetailPage() {
       <div className="flex h-[50vh] flex-col items-center justify-center space-y-4">
         <ShieldAlert size={48} className="text-destructive" />
         <h3 className="text-lg font-bold">
-          {t(
-            "msg.admin.common.forbidden",
-            "이 작업을 수행할 권한이 없습니다.",
-          )}
+          {t("msg.admin.common.forbidden", "이 작업을 수행할 권한이 없습니다.")}
         </h3>
         <Button onClick={() => navigate("/")}>
           {t("ui.common.go_home", "홈으로 이동")}
diff --git a/adminfront/src/features/users/UserListPage.tsx b/adminfront/src/features/users/UserListPage.tsx
index 0df7eeff..dd7dfdb1 100644
--- a/adminfront/src/features/users/UserListPage.tsx
+++ b/adminfront/src/features/users/UserListPage.tsx
@@ -98,8 +98,7 @@ import {
   updateUser,
 } from "../../lib/adminApi";
 import { t } from "../../lib/i18n";
-import { normalizeAdminRole } from "../../lib/roles";
-import { isSuperAdminRole } from "../../lib/roles";
+import { isSuperAdminRole, normalizeAdminRole } from "../../lib/roles";
 import {
   downloadUserTemplate,
   UserBulkUploadModal,
diff --git a/adminfront/tests/security_roles.spec.ts b/adminfront/tests/security_roles.spec.ts
index 70b6bf99..207b5dae 100644
--- a/adminfront/tests/security_roles.spec.ts
+++ b/adminfront/tests/security_roles.spec.ts
@@ -196,7 +196,9 @@ test.describe("보안 및 접근 제어: 시스템 관리자 vs 일반 사용자
       await page.goto("/tenants");
       // AppLayout.tsx에서 profileRole !== 'super_admin'일 때 보여주는 메시지 확인
       await expect(
-        page.getByText(/접근 권한이 없습니다|이 작업을 수행할 권한이 없습니다/i),
+        page.getByText(
+          /접근 권한이 없습니다|이 작업을 수행할 권한이 없습니다/i,
+        ),
       ).toBeVisible();
     });
 
diff --git a/adminfront/tests/tenants.spec.ts b/adminfront/tests/tenants.spec.ts
index 34c13c2a..56a62705 100644
--- a/adminfront/tests/tenants.spec.ts
+++ b/adminfront/tests/tenants.spec.ts
@@ -440,7 +440,6 @@ test.describe("Tenants Management", () => {
   });
 
   test.skip("should create a new tenant", async ({ page }) => {
-
     await page.goto("/tenants/new");
     await expect(page.locator("h2").last()).toContainText(/추가|Create/i, {
       timeout: 20000,
diff --git a/adminfront/tests/worksmobile.spec.ts b/adminfront/tests/worksmobile.spec.ts
index 9ff85a53..27959250 100644
--- a/adminfront/tests/worksmobile.spec.ts
+++ b/adminfront/tests/worksmobile.spec.ts
@@ -228,12 +228,7 @@ test.describe("Worksmobile tenant management", () => {
       return route.fulfill({ json: { items: [], total: 0 }, headers });
     });
 
-    await page.goto("/");
-    await expect(
-      page.getByRole("link", { name: "Worksmobile" }),
-    ).toHaveAttribute("href", "/worksmobile");
     await page.goto("/worksmobile");
-
     await expect(page).toHaveURL(/\/worksmobile$/);
     await expect(page.getByRole("tab", { name: "이력" })).toBeVisible();
     await expect(page.getByRole("tab", { name: "사용자" })).toBeVisible();
diff --git a/devfront/src/components/common/DeveloperAccessRequestCard.test.tsx b/devfront/src/components/common/DeveloperAccessRequestCard.test.tsx
index ab78c1f2..ed04dc6e 100644
--- a/devfront/src/components/common/DeveloperAccessRequestCard.test.tsx
+++ b/devfront/src/components/common/DeveloperAccessRequestCard.test.tsx
@@ -1,5 +1,5 @@
-import { act } from "react-dom/test-utils";
 import { createRoot } from "react-dom/client";
+import { act } from "react-dom/test-utils";
 import { afterEach, describe, expect, it, vi } from "vitest";
 import { DeveloperAccessRequestCard } from "./DeveloperAccessRequestCard";
 
diff --git a/devfront/src/components/common/ForbiddenMessage.tsx b/devfront/src/components/common/ForbiddenMessage.tsx
index 3bf488cd..ac4b197d 100644
--- a/devfront/src/components/common/ForbiddenMessage.tsx
+++ b/devfront/src/components/common/ForbiddenMessage.tsx
@@ -34,6 +34,16 @@ export function ForbiddenMessage({ resourceToken }: Props) {
         "Standard user accounts can use this feature only when an operational or administrative relationship is granted for the target application. Request access from an administrator if needed.",
       );
     }
+  } else if (role === "rp_admin") {
+    explanation = t(
+      "msg.dev.forbidden.rp_admin",
+      "RP administrators can only access resources for their assigned applications.",
+    );
+  } else if (role === "tenant_admin") {
+    explanation = t(
+      "msg.dev.forbidden.tenant_admin",
+      "Tenant administrator permissions are not configured correctly or have expired.",
+    );
   }
 
   const resourceLabel =
diff --git a/devfront/src/features/audit/AuditLogsPage.test.tsx b/devfront/src/features/audit/AuditLogsPage.test.tsx
index 021bbd51..a8b9f9db 100644
--- a/devfront/src/features/audit/AuditLogsPage.test.tsx
+++ b/devfront/src/features/audit/AuditLogsPage.test.tsx
@@ -1,6 +1,6 @@
-import { act } from "react-dom/test-utils";
-import { createRoot, type Root } from "react-dom/client";
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { createRoot, type Root } from "react-dom/client";
+import { act } from "react-dom/test-utils";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import AuditLogsPage from "./AuditLogsPage";
 
diff --git a/devfront/src/features/audit/AuditLogsPage.tsx b/devfront/src/features/audit/AuditLogsPage.tsx
index dda76cad..f7d939bb 100644
--- a/devfront/src/features/audit/AuditLogsPage.tsx
+++ b/devfront/src/features/audit/AuditLogsPage.tsx
@@ -8,9 +8,8 @@ import { parseAuditDetails } from "../../../../common/core/audit";
 import { AuditLogTable } from "../../../../common/core/components/audit";
 import { PageHeader } from "../../../../common/core/components/page";
 import { SearchFilterBar } from "../../../../common/ui/search-filter-bar";
-import { ForbiddenMessage } from "../../components/common/ForbiddenMessage";
 import { DeveloperAccessRequestCard } from "../../components/common/DeveloperAccessRequestCard";
-import { useDeveloperAccessGate } from "../developer-access/developerAccessGate";
+import { ForbiddenMessage } from "../../components/common/ForbiddenMessage";
 import { Badge } from "../../components/ui/badge";
 import { Button } from "../../components/ui/button";
 import {
@@ -26,6 +25,7 @@ import { fetchDevAuditLogs } from "../../lib/devApi";
 import { t } from "../../lib/i18n";
 import { resolveProfileRole } from "../../lib/role";
 import { fetchMe } from "../auth/authApi";
+import { useDeveloperAccessGate } from "../developer-access/developerAccessGate";
 
 function toCsv(logs: DevAuditLog[]) {
   const header = [
diff --git a/devfront/src/features/clients/ClientsPage.test.tsx b/devfront/src/features/clients/ClientsPage.test.tsx
index 6c99d8f3..2f92ecba 100644
--- a/devfront/src/features/clients/ClientsPage.test.tsx
+++ b/devfront/src/features/clients/ClientsPage.test.tsx
@@ -1,6 +1,6 @@
-import { act } from "react-dom/test-utils";
-import { createRoot, type Root } from "react-dom/client";
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { createRoot, type Root } from "react-dom/client";
+import { act } from "react-dom/test-utils";
 import { MemoryRouter } from "react-router-dom";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import ClientsPage from "./ClientsPage";
diff --git a/devfront/src/features/clients/components/ClientLogo.test.tsx b/devfront/src/features/clients/components/ClientLogo.test.tsx
index 1fbe8fde..80f2db3b 100644
--- a/devfront/src/features/clients/components/ClientLogo.test.tsx
+++ b/devfront/src/features/clients/components/ClientLogo.test.tsx
@@ -1,6 +1,6 @@
-import { act } from "react-dom/test-utils";
+import type { ComponentProps, ReactNode } from "react";
 import { createRoot, type Root } from "react-dom/client";
-import type { ReactNode, ComponentProps } from "react";
+import { act } from "react-dom/test-utils";
 import { afterEach, describe, expect, it, vi } from "vitest";
 import { ClientLogo } from "./ClientLogo";
 
diff --git a/devfront/src/features/clients/routes/ClientFederationPage.test.tsx b/devfront/src/features/clients/routes/ClientFederationPage.test.tsx
index f97300cd..0919dcfe 100644
--- a/devfront/src/features/clients/routes/ClientFederationPage.test.tsx
+++ b/devfront/src/features/clients/routes/ClientFederationPage.test.tsx
@@ -1,6 +1,6 @@
-import { act } from "react-dom/test-utils";
-import { createRoot, type Root } from "react-dom/client";
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { createRoot, type Root } from "react-dom/client";
+import { act } from "react-dom/test-utils";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { ClientFederationPage } from "./ClientFederationPage";
 
diff --git a/devfront/src/features/developer-access/developerAccessGate.ts b/devfront/src/features/developer-access/developerAccessGate.ts
index a0677601..b482da4b 100644
--- a/devfront/src/features/developer-access/developerAccessGate.ts
+++ b/devfront/src/features/developer-access/developerAccessGate.ts
@@ -1,7 +1,7 @@
 import { useQuery } from "@tanstack/react-query";
 import {
-  fetchDeveloperRequestStatus,
   type DeveloperRequestStatus,
+  fetchDeveloperRequestStatus,
 } from "../../lib/devApi";
 
 export type DeveloperAccessGateState = {
@@ -12,7 +12,11 @@ export type DeveloperAccessGateState = {
 };
 
 function isPrivilegedDeveloperRole(profileRole: string) {
-  return profileRole === "super_admin";
+  return (
+    profileRole === "super_admin" ||
+    profileRole === "rp_admin" ||
+    profileRole === "tenant_admin"
+  );
 }
 
 export function resolveDeveloperAccessGate(
diff --git a/devfront/src/features/developer-request/DeveloperRequestPage.test.tsx b/devfront/src/features/developer-request/DeveloperRequestPage.test.tsx
index a357c1ec..c8bf3a10 100644
--- a/devfront/src/features/developer-request/DeveloperRequestPage.test.tsx
+++ b/devfront/src/features/developer-request/DeveloperRequestPage.test.tsx
@@ -1,6 +1,6 @@
-import { act } from "react-dom/test-utils";
-import { createRoot, type Root } from "react-dom/client";
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { createRoot, type Root } from "react-dom/client";
+import { act } from "react-dom/test-utils";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import DeveloperRequestPage from "./DeveloperRequestPage";
 
diff --git a/devfront/src/features/overview/GlobalOverviewPage.tsx b/devfront/src/features/overview/GlobalOverviewPage.tsx
index 77bae531..89fd230e 100644
--- a/devfront/src/features/overview/GlobalOverviewPage.tsx
+++ b/devfront/src/features/overview/GlobalOverviewPage.tsx
@@ -4,8 +4,8 @@ import {
   Activity,
   AlertTriangle,
   CheckCircle2,
-  Clock3,
   ChevronDown,
+  Clock3,
   Layers3,
   LayoutDashboard,
   ShieldCheck,
@@ -21,7 +21,6 @@ import {
 import { DeveloperAccessRequestCard } from "../../components/common/DeveloperAccessRequestCard";
 import { Badge } from "../../components/ui/badge";
 import { Button } from "../../components/ui/button";
-import { useDeveloperAccessGate } from "../developer-access/developerAccessGate";
 import {
   type ClientSummary,
   fetchClients,
@@ -35,6 +34,7 @@ import {
 import { t } from "../../lib/i18n";
 import { resolveProfileRole } from "../../lib/role";
 import { fetchMe } from "../auth/authApi";
+import { useDeveloperAccessGate } from "../developer-access/developerAccessGate";
 import {
   buildRecentClientChanges,
   type RecentClientChange,
diff --git a/devfront/src/features/overview/recentClientChanges.ts b/devfront/src/features/overview/recentClientChanges.ts
index 2084a226..3e6614a0 100644
--- a/devfront/src/features/overview/recentClientChanges.ts
+++ b/devfront/src/features/overview/recentClientChanges.ts
@@ -1,12 +1,12 @@
 import {
+  type AuditDetails,
+  type CommonAuditLog,
   formatAuditValue,
   parseAuditDetails,
   resolveAuditActor,
-  type AuditDetails,
-  type CommonAuditLog,
 } from "../../../../common/core/audit";
-import { t } from "../../lib/i18n";
 import type { ClientSummary, DevAuditLog } from "../../lib/devApi";
+import { t } from "../../lib/i18n";
 
 export type RecentClientChange = {
   eventId: string;
diff --git a/devfront/src/lib/role.ts b/devfront/src/lib/role.ts
index 5c00ecef..48439ee4 100644
--- a/devfront/src/lib/role.ts
+++ b/devfront/src/lib/role.ts
@@ -7,6 +7,14 @@ export function normalizeRole(rawRole: unknown): string {
     case "superadmin":
     case "super-admin":
       return "super_admin";
+    case "rp_admin":
+    case "rpadmin":
+    case "rp-admin":
+      return "rp_admin";
+    case "tenant_admin":
+    case "tenantadmin":
+    case "tenant-admin":
+      return "tenant_admin";
     default:
       return "user";
   }
diff --git a/devfront/tests/clients.spec.ts b/devfront/tests/clients.spec.ts
index af5b5491..824d7539 100644
--- a/devfront/tests/clients.spec.ts
+++ b/devfront/tests/clients.spec.ts
@@ -1,8 +1,8 @@
 import { expect, test } from "@playwright/test";
 import {
-  type DevAssignableUser,
   type AuditLog,
   type Consent,
+  type DevAssignableUser,
   installDevApiMock,
   makeClient,
   seedAuth,