diff --git a/server/backend/internal/httpapi/manage/auth.go b/server/backend/internal/httpapi/manage/auth.go
index f345ba7..ad54a31 100644
--- a/server/backend/internal/httpapi/manage/auth.go
+++ b/server/backend/internal/httpapi/manage/auth.go
@@ -51,7 +51,7 @@ func HandleLoginUI(authStore *store.AuthStore, screenStore *store.ScreenStore, c
 				switch u.Role {
 				case "admin":
 					http.Redirect(w, r, "/admin", http.StatusSeeOther)
-				case "screen_user":
+				case "screen_user", "restricted":
 					handleScreenUserRedirect(w, r, screenStore, u)
 				default:
 					if u.TenantSlug != "" {
@@ -159,7 +159,7 @@ func HandleLoginPost(authStore *store.AuthStore, screenStore *store.ScreenStore,
 		switch user.Role {
 		case "admin":
 			http.Redirect(w, r, "/admin", http.StatusSeeOther)
-		case "screen_user":
+		case "screen_user", "restricted":
 			handleScreenUserRedirect(w, r, screenStore, user)
 		default:
 			if user.TenantSlug != "" {