Administrator access is checked server-side against the private user_roles table. Admin lists are paginated to 20 records per request.