diff --git a/app/controllers/admin/base_controller.rb b/app/controllers/admin/base_controller.rb
index 3152c22..964d1bc 100644
--- a/app/controllers/admin/base_controller.rb
+++ b/app/controllers/admin/base_controller.rb
@@ -1,32 +1,32 @@
 class Admin::BaseController < ApplicationController
   before_action :require_admin, except: [:login]
 
   # GET /admin
   # POST /admin
   def index
     @client_ids = Client.pluck(:ClientId)
     get_charts
     @global_stats = GlobalStats.new.stats
     render 'admin/index'
   end
 
   # GET /admin/login
   def login
     render 'admin/login'
   end
 
   protected
 
   def get_charts
     days_ago = params.fetch(:days_back, 7).to_i rescue 7
     @job_status = ChartGenerator.job_statuses(@client_ids, days_ago)
     @job_stats = ChartGenerator.job_stats(@client_ids, days_ago - 1)
   end
 
   def require_admin
-    return if current_user.try(:admin?)
+    return if current_user.try(:has_admin_access?)
 
     flash[:alert] = 'You need to log in first'
     redirect_to admin_login_path
   end
 end
diff --git a/app/models/user.rb b/app/models/user.rb
index 7eff2b7..2fb883d 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -1,131 +1,138 @@
 class User < ActiveRecord::Base
   establish_connection ARCHIVING_CONF
 
   attr_accessor :password, :retype_password
 
   serialize :temp_hosts, JSON
 
   has_many :ownerships
   has_many :hosts, through: :ownerships, inverse_of: :users
   has_many :invitations
 
   enum user_type: { institutional: 0, vima: 1, okeanos: 2, admin: 3 }
 
   validates :user_type, presence: true
   validates :username, presence: true, uniqueness: { scope: :user_type }
   validates :email, presence: true, uniqueness: { scope: :user_type }
 
   before_create :confirm_passwords, if: :admin?
 
   # Returns an admin user with the given password
   #
   # @param username[String] username from user input
   # @param a_password[String] password from user input
   #
   # @return [User] the admin user or nil
   def self.fetch_admin_with_password(username, a_password)
     hashed_pass = Digest::SHA256.hexdigest(a_password + Rails.application.secrets.salt)
     admin = User.admin.find_by_username_and_password_hash(username, hashed_pass)
     admin
   end
 
   # Initializes a user token which will be used for API access
   def create_token
     self.token = Digest::SHA256.hexdigest(
       Time.now.to_s + Rails.application.secrets.salt + email
     )
     save
   end
 
   # Composes the user's display name from the user's username and email
   #
   # @return [String]
   def display_name
     "#{username} <#{email}>"
   end
 
   # Determines if the user must select hosts from a list or enter their
   # FQDN manually
   #
   # @return [Boolean]
   def needs_host_list?
     vima? || okeanos?
   end
 
   # Determines if the user is editable or not.
   # Editable users are only admin users, all others come from 3rd party authorization
   #
   # @return [Boolean]
   def editable?
     admin?
   end
 
   # Marks a user as not enabled
   def ban
     self.enabled = false
     save
   end
 
   # Marks a user as enabled
   def unban
     self.enabled = true
     save
   end
 
   # Stores a hashed password as a password_hash
   #
   # @param a_password[String] the user submitted password
   #
   # @return [Boolean] the save exit status
   def add_password(a_password)
     self.password_hash = Digest::SHA256.hexdigest(a_password + Rails.application.secrets.salt)
     self.save
   end
 
   # Fetches the user's unverified hosts
   #
   # @return [Array] of Strings containing the hosts' names
   def unverified_hosts
     hosts.unverified.pluck(:name)
   end
 
   # Fetches the user's hosts that are being backed up by bacula
   #
   # @return [Array] of Strings configuration the host's names
   def baculized_hosts
     hosts.in_bacula.pluck(:name)
   end
 
   # Fetches the user's hosts that are NOT being backed up by bacula
   #
   # @return [Array] of Strings configuration the host's names
   def non_baculized_hosts
     hosts.not_baculized.pluck(:name)
   end
 
   # Determines if a vima user needs to update his hosts' list
   #
   # @return [Boolean]
   def refetch_hosts?
     return false unless vima?
     return true if hosts_updated_at.nil?
 
     hosts_updated_at < Archiving.settings[:skip_host_fetch_time_period].ago
   end
 
+  # Determines if a user has admin access to archiving or not
+  #
+  # @return [Boolean]
+  def has_admin_access?
+    admin? || moderator?
+  end
+
   private
 
   def confirm_passwords
     if password.blank?
       self.errors.add(:password, 'Must give a password')
       return false
     end
     if password != retype_password
       self.errors.add(:password, 'Passwords mismatch')
       self.errors.add(:retype_password, 'Passwords mismatch')
       return false
     end
 
     true
   end
 end
diff --git a/app/views/shared/_nav.html.erb b/app/views/shared/_nav.html.erb
index 51dd235..fd515dc 100644
--- a/app/views/shared/_nav.html.erb
+++ b/app/views/shared/_nav.html.erb
@@ -1,58 +1,58 @@
 <!-- Fixed navbar -->
 <nav class="navbar navbar-default navbar-fixed-top">
   <div class="container-fluid">
     <div class="navbar-header">
       <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#navbar">
         <span class="sr-only">Toggle navigation</span>
         <span class="icon-bar"></span>
         <span class="icon-bar"></span>
         <span class="icon-bar"></span>
       </button>
     </div>
     <div id="navbar" class="navbar-collapse collapse">
       <ul class="nav navbar-nav">
         <li class="logo">
           <%= link_to root_path do %>
             <p><b>GRNET NOC</b></p>
             <p>Archiving</p>
           <% end %>
         </li>
         <% if current_user %>
           <%= content_tag(:li, active_class(clients_path, true)) do %>
             <%= link_to 'Clients', clients_path %>
           <% end %>
         <% end %>
         <%= content_tag(:li, active_class(faq_path)) do %>
           <%= link_to 'FAQ', faq_path %>
         <% end %>
       </ul>
 
       <% if current_user %>
         <ul class="nav navbar-nav navbar-right">
           <li>
             <%= link_to '#', class: 'dropdown-toggle', 'data-toggle' => 'dropdown' do %>
               <label class="glyphicon glyphicon-user"></label>
               <%= current_user.username %><span class="caret"></span>
             <% end %>
             <ul class="dropdown-menu">
               <li>
                 <%= link_to user_path(current_user) do %>
                   <label class="glyphicon glyphicon-wrench"></label>
                   Info
                 <% end %>
               </li>
               <li>
                 <%= link_to logout_path do %>
                   <label class="glyphicon glyphicon-log-out"></label>
                   Logout
                 <% end %>
               </li>
             </ul>
           </li>
         </ul>
       <% end %>
 
-      <%= render partial: 'shared/admin' if current_user.try(:admin?) %>
+      <%= render partial: 'shared/admin' if current_user.try(:has_admin_access?) %>
     </div><!--/.nav-collapse -->
   </div>
 </nav>