diff --git a/scripts/seed_admin.py b/scripts/seed_admin.py
index 1f0f77a..e600d6d 100644
--- a/scripts/seed_admin.py
+++ b/scripts/seed_admin.py
@@ -78,6 +78,7 @@ async def seed():
                 name="Administrator",
                 password_hash=hash_password(os.environ.get("ADMIN_PASSWORD", "Admin123!")),
                 is_active=True,
+                is_system_admin=True,
                 preferences={},
             )
             db.add(user)
@@ -97,6 +98,19 @@ async def seed():
             print(f"Created user_tenant link with admin role")
         else:
             print(f"User exists: {user.email} (id: {user.id})")
+            # Ensure existing admin has is_system_admin=True
+            if not user.is_system_admin:
+                user.is_system_admin = True
+                await db.flush()
+                print(f"Updated is_system_admin=True for {user.email}")
+
+        # Seed default workspace if none exists for this tenant
+        from app.services.workspace_service import seed_default_workspace
+        ws_result = await seed_default_workspace(db, tenant.id, user.id)
+        if ws_result:
+            print(f"Created default workspace: {ws_result['name']} (id: {ws_result['id']})")
+        else:
+            print("Workspace already exists — skipping workspace seed")
 
         await db.commit()
         print("Seed completed successfully.")