diff --git a/src/routes/idaa/+layout.svelte b/src/routes/idaa/+layout.svelte
index 601bb85b..3b9fb362 100644
--- a/src/routes/idaa/+layout.svelte
+++ b/src/routes/idaa/+layout.svelte
@@ -206,6 +206,15 @@ $effect(() => {
     }
 });
 
+// When in iframe mode, the sys bar is hidden by default (it's nav chrome the host page
+// doesn't need). However, trusted admins should still get the menu — they can't update
+// the iframe src to pass show_menu=true, so we watch for trusted_access and unhide it.
+$effect(() => {
+    if (browser && $ae_loc.iframe && $ae_loc.trusted_access) {
+        $ae_loc.sys_menu.hide = false;
+    }
+});
+
 $effect(() => {
     if (
         $ae_loc.iframe &&