diff --git a/im-service/src/main/java/com/xuqm/im/controller/ImAdminController.java b/im-service/src/main/java/com/xuqm/im/controller/ImAdminController.java
index 3cbb092..4a02265 100644
--- a/im-service/src/main/java/com/xuqm/im/controller/ImAdminController.java
+++ b/im-service/src/main/java/com/xuqm/im/controller/ImAdminController.java
@@ -670,7 +670,7 @@ public class ImAdminController {
     }
 
     @GetMapping("/users/state")
-    @PreAuthorize("hasAuthority('ROLE_OPS')")
+    @PreAuthorize("hasAnyAuthority('ROLE_OPS', 'ROLE_TENANT')")
     public ResponseEntity<ApiResponse<Map<String, Object>>> queryUserState(
             @RequestParam String userIds) {
         Map<String, Object> result = new LinkedHashMap<>();
@@ -687,7 +687,7 @@ public class ImAdminController {
     }
 
     @PostMapping("/users/kick")
-    @PreAuthorize("hasAuthority('ROLE_OPS')")
+    @PreAuthorize("hasAnyAuthority('ROLE_OPS', 'ROLE_TENANT')")
     public ResponseEntity<ApiResponse<Void>> kickUsers(
             @RequestParam String appId,
             @AuthenticationPrincipal String operatorId,
@@ -703,7 +703,7 @@ public class ImAdminController {
     }
 
     @PostMapping("/messages/batch-send")
-    @PreAuthorize("hasAuthority('ROLE_OPS')")
+    @PreAuthorize("hasAnyAuthority('ROLE_OPS', 'ROLE_TENANT')")
     public ResponseEntity<ApiResponse<List<ImMessageEntity>>> batchSendMsg(
             @RequestParam String appId,
             @AuthenticationPrincipal String operatorId,
@@ -719,7 +719,7 @@ public class ImAdminController {
     }
 
     @PostMapping("/messages/read")
-    @PreAuthorize("hasAuthority('ROLE_OPS')")
+    @PreAuthorize("hasAnyAuthority('ROLE_OPS', 'ROLE_TENANT')")
     public ResponseEntity<ApiResponse<Void>> adminSetMsgRead(
             @RequestParam String appId,
             @AuthenticationPrincipal String operatorId,
@@ -730,7 +730,7 @@ public class ImAdminController {
     }
 
     @PostMapping("/messages/import")
-    @PreAuthorize("hasAuthority('ROLE_OPS')")
+    @PreAuthorize("hasAnyAuthority('ROLE_OPS', 'ROLE_TENANT')")
     public ResponseEntity<ApiResponse<List<ImMessageEntity>>> importMessages(
             @RequestParam String appId,
             @AuthenticationPrincipal String operatorId,