diff --git a/frontend/components/user/user-form.vue b/frontend/components/user/user-form.vue
new file mode 100644
index 0000000..3e9fac6
--- /dev/null
+++ b/frontend/components/user/user-form.vue
@@ -0,0 +1,125 @@
+<template>
+    <form @submit.prevent="validate">
+        <div
+            class="flex items-center justify-between gap-10">
+            <h1 class="text-3xl font-bold uppercase">
+                {{ userId ? "Modifications de l'utilisateur" : "Ajout d'un utilisateur" }}
+            </h1>
+            <button
+                class="text-xl uppercase bg-primary-500 text-white h-[50px] w-[272px]"
+                type="submit"
+            >
+                {{ userId ? 'Sauvegarder' : 'Ajouter' }}
+            </button>
+        </div>
+
+        <div class="grid gap-y-16 gap-x-40 mb-16">
+            <UiTextInput
+                id="user-name"
+                v-model="form.username"
+                label="Nom de l'utilisateur"
+            />
+
+            <UiSelect
+                id="user-role"
+                v-model="form.role"
+                label="Rôle de l'utilisateur"
+                :options="[
+                    { value: ROLE.ROLE_USER, label: 'User' },
+                    { value: ROLE.ROLE_ADMIN, label: 'Admin' },
+                ]"
+            />
+            <UiTextInput
+                id="user-password"
+                v-model="form.password"
+                label="Mot de passe"
+                type="password"
+
+            />
+
+        </div>
+    </form>
+</template>
+
+<script setup lang="ts">
+
+import {computed, reactive, ref, watch} from 'vue'
+import {ROLE} from '~/utils/constants'
+import {createUser, updateUser, getUser} from '~/services/auth'
+import type {UserData} from '~/services/dto/user-data'
+
+const route = useRoute()
+const router = useRouter()
+const userId = computed(() => resolveUserId(route.params.id))
+const isLoading = ref(false)
+const isHydrating = ref(false)
+
+const resolveUserId = (param: unknown) => {
+    const idStr = Array.isArray(param) ? param[0] : param
+    if (!idStr) {
+        return null
+    }
+    const id = Number(idStr)
+    return Number.isFinite(id) ? id : null
+}
+
+const form = reactive({
+    username: '',
+    role: '',
+    password: ''
+})
+
+const hydrateFromUser = (user: UserData | null) => {
+    if (!user) {
+        return
+    }
+    isHydrating.value = true
+    form.username = user.username ?? ''
+    const roles = user.roles ?? []
+    const hasAdmin = roles.includes(ROLE.ROLE_ADMIN)
+    form.role = hasAdmin ? ROLE.ROLE_ADMIN : ROLE.ROLE_USER
+    form.password = ''
+    isHydrating.value = false
+}
+
+watch(
+    () => userId.value,
+    async (id) => {
+        if (id === null) {
+            return
+        }
+        isLoading.value = true
+        try {
+            const user = await getUser(id)
+            hydrateFromUser(user)
+        } finally {
+            isLoading.value = false
+        }
+    },
+    {immediate: true}
+)
+
+async function validate() {
+
+    const normalizedUsername = form.username.trim()
+    const normalizedRole = form.role.trim()
+    const normalizedPassword = form.password.trim()
+
+    const basePayload = {
+        username: normalizedUsername,
+        roles: normalizedRole ? [normalizedRole] : undefined,
+        password: normalizedPassword || undefined
+    }
+
+    if (userId.value) {
+        await updateUser(userId.value, basePayload)
+        await router.push(`/admin/user/list/`)
+        return
+    }
+
+    const created = await createUser(basePayload)
+    if (created) {
+        await router.push(`/admin/user/list/`)
+    }
+}
+</script>
diff --git a/frontend/i18n/locales/fr.json b/frontend/i18n/locales/fr.json
index cc66034..d00870e 100644
--- a/frontend/i18n/locales/fr.json
+++ b/frontend/i18n/locales/fr.json
@@ -57,7 +57,9 @@
         "auth": {
             "login": "Identifiants invalides.",
             "users": "Impossible de récupérer les utilisateurs.",
-            "logout": "Impossible de se déconnecter."
+            "logout": "Impossible de se déconnecter.",
+            "update": "Impossible de mettre à jour l'utilisateur.",
+            "create": "Impossible de créer l'utilisateur."
         }
     },
     "success": {
@@ -65,6 +67,8 @@
             "update": "Réception mise à jour avec succès."
         },
         "auth": {
+            "update": "Utilisateur mis à jour avec succès.",
+            "create": "Utilisateur créé avec succès.",
             "login": "Connexion réussie.",
             "logout": "Déconnexion réussie."
         }
diff --git a/frontend/layouts/admin.vue b/frontend/layouts/admin.vue
index a840e82..fef789c 100644
--- a/frontend/layouts/admin.vue
+++ b/frontend/layouts/admin.vue
@@ -28,7 +28,7 @@
                     <!-- Liste des liens à ajouter ci-dessous -->
                     <!--Button pour afficher le component admin-users -->
                     <NuxtLink
-                        to="/admin/user-list"
+                        to="/admin/user/list"
                         class="block px-4 py-2 rounded hover:bg-primary-600 transition"
                     >
                         Utilisateurs
@@ -58,8 +58,9 @@
 
 
 <script setup lang="ts">
-import auth from "~/layouts/auth.vue";
+import {useAuthStore} from '~/stores/auth'
 
+const auth = useAuthStore()
 const { version } = useAppVersion()
 const handleLogout = async () => {
     try {
diff --git a/frontend/layouts/default.vue b/frontend/layouts/default.vue
index e978c6d..5254dd3 100644
--- a/frontend/layouts/default.vue
+++ b/frontend/layouts/default.vue
@@ -20,7 +20,10 @@
                             Accueil
                         </a>
                     </NuxtLink>
-                    <NuxtLink to="/admin/dashboard" custom v-slot="{ href, navigate, isActive }">
+                    <NuxtLink
+                        to="/admin/dashboard" custom v-slot="{ href, navigate, isActive }"
+                        v-if="auth.isAdmin"
+                    >
                         <a
                             :href="href"
                             @click="navigate"
@@ -107,27 +110,27 @@
 </template>
 
 <script setup lang="ts">
-import { useAuthStore } from '~/stores/auth'
+import {useAuthStore} from '~/stores/auth'
 
 const route = useRoute()
 const auth = useAuthStore()
 const isMenuOpen = ref(false)
-const { version } = useAppVersion()
+const {version} = useAppVersion()
 
 const closeMenu = () => {
-  isMenuOpen.value = false
+    isMenuOpen.value = false
 }
 
 const toggleMenu = () => {
-  isMenuOpen.value = !isMenuOpen.value
+    isMenuOpen.value = !isMenuOpen.value
 }
 
 const handleLogout = async () => {
-  try {
-    await auth.logout()
-  } finally {
-    closeMenu()
-    await navigateTo('/login')
-  }
+    try {
+        await auth.logout()
+    } finally {
+        closeMenu()
+        await navigateTo('/login')
+    }
 }
 </script>
diff --git a/frontend/pages/admin/dashboard.vue b/frontend/pages/admin/dashboard.vue
index d61fc7d..788fdd1 100644
--- a/frontend/pages/admin/dashboard.vue
+++ b/frontend/pages/admin/dashboard.vue
@@ -1,13 +1,9 @@
 <template>
-    <admin-users v-if="activeCode === 'users'" />
+    <AdminUserForm/>
 </template>
 
 <script setup lang="ts">
 definePageMeta({
     layout: 'admin'
 })
-const route = useRoute()
-
-const activeCode = computed(() => (route.query.code as string))
-
 </script>
diff --git a/frontend/pages/admin/user/[[id]].vue b/frontend/pages/admin/user/[[id]].vue
new file mode 100644
index 0000000..e048f43
--- /dev/null
+++ b/frontend/pages/admin/user/[[id]].vue
@@ -0,0 +1,8 @@
+<template>
+    <UserForm/>
+</template>
+<script setup lang="ts">
+definePageMeta({
+    layout: 'admin'
+})
+</script>
diff --git a/frontend/pages/admin/user-list.vue b/frontend/pages/admin/user/list.vue
similarity index 56%
rename from frontend/pages/admin/user-list.vue
rename to frontend/pages/admin/user/list.vue
index e0f0d6d..0222982 100644
--- a/frontend/pages/admin/user-list.vue
+++ b/frontend/pages/admin/user/list.vue
@@ -1,12 +1,13 @@
 <template>
-    <div class="flex items-center justify-between gap-10">
-        <h1 class="text-3xl font-bold uppercase">Utilisateurs</h1>
-        <button
-            class="text-xl uppercase bg-primary-500 text-white h-[50px] w-[272px]"
-            @click="null"
+    <div class="flex items-center justify-between">
+        <h1 class="text-3xl font-bold uppercase">Liste des utilisateurs</h1>
+        <NuxtLink
+            class="flex items-center justify-center text-xl uppercase bg-primary-500 text-white h-[50px] w-[272px]"
+            @click="router.push('/admin/user/')"
         >
             Ajouter
-        </button>
+        </NuxtLink>
+
     </div>
 
     <div>
@@ -14,39 +15,27 @@
             <div class="grid grid-cols-3 gap-4 bg-slate-100 px-4 py-3 text-sm font-semibold uppercase tracking-wide">
                 <div>Username</div>
                 <div>Role</div>
-                <div>Action</div>
             </div>
             <div
                 v-for="user in userList"
                 :key="user.id"
-                class="grid grid-cols-3 gap-4 px-4 py-3 text-sm hover:bg-slate-50 cursor-pointer border-t border-slate-200 items-center"
+                class="grid grid-cols-3 gap-4 px-4 py-3 text-sm hover:bg-slate-50 cursor-pointer border-t items-center"
                 role="button"
                 tabindex="0"
+                @click="goToUser(user.id)"
             >
                 <div>
-                    {{ user.username}}
+                    {{ user.username }}
                 </div>
                 <div>
                     {{ user.roles?.join(', ') || ' ---' }}
                 </div>
-                <div>
-                    <div class="p-4">
-                        <button
-                            class="text-xl uppercase bg-primary-500 text-white h-[50px] w-[272px]"
-                            @click="null"
-                        >
-                            Modifier
-                        </button>
-                    </div>
-                </div>
             </div>
         </div>
     </div>
 </template>
 
 
-
-
 <script setup lang="ts">
 definePageMeta({
     layout: 'admin'
@@ -56,7 +45,11 @@ import type {UserData} from "~/services/dto/user-data";
 import {getUsers} from "~/services/auth";
 
 const userList = ref<UserData[]>([])
+const router = useRouter()
 
+const goToUser = (id: number) => {
+    router.push(`/admin/user/${id}`)
+}
 
 onMounted(async () => {
     userList.value = await getUsers()
diff --git a/frontend/services/auth.ts b/frontend/services/auth.ts
index a573dee..7703ac4 100644
--- a/frontend/services/auth.ts
+++ b/frontend/services/auth.ts
@@ -1,5 +1,6 @@
 import { useApi } from '~/composables/useApi'
 import type { UserData } from '~/services/dto/user-data'
+import type {UserPayload} from "~/services/dto/user-data";
 
 export async function getUsers() {
   const api = useApi()
@@ -13,6 +14,28 @@ export async function getUsers() {
   return data['hydra:member'] ?? []
 }
 
+export async function getUser(id: number) {
+  const api = useApi()
+  return api.get<UserData>(`users/${id}`, {}, {
+    toastErrorKey: 'errors.auth.user'
+  })
+}
+
+export async function createUser(payload: UserPayload = {}) {
+    const api = useApi()
+    return api.post<UserData>('users', payload, {
+        toastErrorKey: 'errors.auth.create',
+        toastSuccessKey : 'success.auth.create'
+    })
+}
+
+export async function updateUser(id : number, playload: UserPayload = {}){
+    const api = useApi()
+    return api.patch<UserData>(`users/${id}`, playload, {
+        toastErrorKey: 'errors.auth.update',
+        toastSuccessKey: 'success.auth.update'
+    })
+}
 export async function getCurrentUser() {
   const api = useApi()
   return api.get<UserData>('me', {}, {
diff --git a/frontend/services/dto/user-data.ts b/frontend/services/dto/user-data.ts
index 4db819e..ae62f22 100644
--- a/frontend/services/dto/user-data.ts
+++ b/frontend/services/dto/user-data.ts
@@ -1,5 +1,11 @@
 export interface UserData {
   id: number
   username: string
+  roles: string[]
+}
+
+export type UserPayload = {
+  username?: string
+  password?: string
   roles?: string[]
 }
diff --git a/frontend/stores/auth.ts b/frontend/stores/auth.ts
index 42ecfa4..d5d9f00 100644
--- a/frontend/stores/auth.ts
+++ b/frontend/stores/auth.ts
@@ -1,63 +1,80 @@
-import { defineStore } from 'pinia'
-import type { UserData } from '~/services/dto/user-data'
-import { getCurrentUser, login, logout } from '~/services/auth'
+import {defineStore} from 'pinia'
+import type {UserData} from '~/services/dto/user-data'
+import {getCurrentUser, createUser, login, logout} from '~/services/auth'
+import type {UserPayload} from "~/services/dto/user-data";
+import {ROLE} from '~/utils/constants'
 
 export const useAuthStore = defineStore('auth', {
-  state: () => ({
-    user: null as UserData | null,
-    isLoading: false,
-    checked: false
-  }),
-  getters: {
-    isAuthenticated: (state) => Boolean(state.user)
-  },
-  actions: {
-    clearSession() {
-      this.user = null
-      this.checked = true
-      this.isLoading = false
+    state: () => ({
+        user: null as UserData | null,
+        isLoading: false,
+        checked: false
+    }),
+    getters: {
+        isAuthenticated: (state) => Boolean(state.user),
+        isAdmin: (state) => Boolean(state.user?.roles?.includes(ROLE.ROLE_ADMIN))
     },
-    async ensureSession() {
-      if (this.checked) {
-        return this.user
-      }
+    actions: {
+        clearSession() {
+            this.user = null
+            this.checked = true
+            this.isLoading = false
+        },
+        async ensureSession() {
+            if (this.checked) {
+                return this.user
+            }
 
-      this.checked = true
+            this.checked = true
 
-      try {
-        const me = await getCurrentUser()
-        this.user = me
-        return me
-      } catch {
-        this.user = null
-        return null
-      }
-    },
-    async login(username: string, password: string) {
-      this.isLoading = true
+            try {
+                const me = await getCurrentUser()
+                this.user = me
+                return me
+            } catch {
+                this.user = null
+                return null
+            }
+        },
+        async login(username: string, password: string) {
+            this.isLoading = true
 
-      try {
-        await login(username, password)
-        const me = await getCurrentUser()
-        this.user = me
-        this.checked = true
-        return me
-      } finally {
-        this.isLoading = false
-      }
-    },
-    async logout() {
-      this.isLoading = true
+            try {
+                await login(username, password)
+                const me = await getCurrentUser()
+                this.user = me
+                this.checked = true
+                return me
+            } finally {
+                this.isLoading = false
+            }
+        },
+        async createUser(payload: UserPayload = {}) {
+            this.isLoading = true
+            const result = await createUser(payload).finally(() => {
+                this.isLoading = false
+            })
+            return result
+        },
+        async updateUser(id: number, payload: UserPayload) {
+            this.isLoading = true
+            const result = await createUser(payload).finally(() => {
+                this.isLoading = false
+            })
+            return result
+        },
+        async logout() {
+            this.isLoading = true
 
-      try {
-        await logout()
-      } catch {
-        // Ignore logout errors so we can still clear local auth state.
-      } finally {
-        this.user = null
-        this.checked = true
-        this.isLoading = false
-      }
+            try {
+                await logout()
+            } catch {
+                // Ignore logout errors so we can still clear local auth state.
+            } finally {
+                this.user = null
+                this.checked = true
+                this.isLoading = false
+            }
+        },
     }
-  }
 })
diff --git a/frontend/utils/constants.ts b/frontend/utils/constants.ts
index 507b268..acfab4f 100644
--- a/frontend/utils/constants.ts
+++ b/frontend/utils/constants.ts
@@ -8,6 +8,10 @@ export const MERCHANDISE_TYPE_CODES = {
     AUTRES: 'AUTRES'
 } as const
 
+export const ROLE = {
+    ROLE_ADMIN : 'ROLE_ADMIN',
+    ROLE_USER : 'ROLE_USER'
+}
 export const SUPLLIER_CODE = {
     LIOT: 'LIOT'
 }
diff --git a/src/Entity/User.php b/src/Entity/User.php
index 7acee63..13b672e 100644
--- a/src/Entity/User.php
+++ b/src/Entity/User.php
@@ -7,7 +7,10 @@ namespace App\Entity;
 use ApiPlatform\Metadata\ApiResource;
 use ApiPlatform\Metadata\Get;
 use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Patch;
+use ApiPlatform\Metadata\Post;
 use App\State\MeProvider;
+use App\State\UserPasswordProcessor;
 use Doctrine\ORM\Mapping as ORM;
 use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;
 use Symfony\Component\Security\Core\User\UserInterface;
@@ -28,10 +31,27 @@ use Symfony\Component\Serializer\Attribute\Groups;
             normalizationContext: ['groups' => ['user:read']],
             security: "is_granted('ROLE_USER')"
         ),
-        new GetCollection(
+        new Post(
             normalizationContext: ['groups' => ['user:read']],
+            denormalizationContext: ['groups' => ['user:write']],
+            security: "is_granted('ROLE_ADMIN')",
+            processor: UserPasswordProcessor::class
+        ),
+        new Patch(
+            normalizationContext: ['groups' => ['user:read']],
+            denormalizationContext: ['groups' => ['user:write']],
+            security: "is_granted('ROLE_ADMIN')",
+            processor: UserPasswordProcessor::class
+        ),
+        new GetCollection(
+            normalizationContext: ['groups' => ['user-login:read']],
             security: "is_granted('PUBLIC_ACCESS')"
         ),
+        new GetCollection(
+            uriTemplate: '/admin/users',
+            normalizationContext: ['groups' => ['user:read']],
+            security: "is_granted('ROLE_ADMIN')"
+        ),
     ],
     normalizationContext: ['groups' => ['user:read']],
     paginationEnabled: false
@@ -41,18 +61,19 @@ class User implements UserInterface, PasswordAuthenticatedUserInterface
     #[ORM\Id]
     #[ORM\GeneratedValue]
     #[ORM\Column(type: 'integer')]
-    #[Groups(['user:read', 'reception:read'])]
+    #[Groups(['user:read', 'user-login:read', 'reception:read'])]
     private ?int $id = null;
 
     #[ORM\Column(length: 180, unique: true)]
-    #[Groups(['user:read', 'reception:read'])]
+    #[Groups(['user:read', 'user:write', 'user-login:read', 'reception:read'])]
     private string $username = '';
 
     #[ORM\Column(type: 'json')]
-    #[Groups(['user:read'])]
+    #[Groups(['user:write', 'user:read'])]
     private array $roles = [];
 
     #[ORM\Column]
+    #[Groups(['user:write'])]
     private string $password = '';
 
     public function getId(): ?int
diff --git a/src/State/UserPasswordProcessor.php b/src/State/UserPasswordProcessor.php
new file mode 100644
index 0000000..8bbd8fb
--- /dev/null
+++ b/src/State/UserPasswordProcessor.php
@@ -0,0 +1,40 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\State;
+
+use ApiPlatform\Metadata\Operation;
+use ApiPlatform\State\ProcessorInterface;
+use App\Entity\User;
+use Symfony\Component\DependencyInjection\Attribute\Autowire;
+use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
+
+final class UserPasswordProcessor implements ProcessorInterface
+{
+    public function __construct(
+        private readonly UserPasswordHasherInterface $hasher,
+        #[Autowire(service: 'api_platform.doctrine.orm.state.persist_processor')]
+        private readonly ProcessorInterface $persistProcessor
+    ) {}
+
+    public function process(mixed $data, Operation $operation, array $uriVariables = [], array $context = []): mixed
+    {
+        if ($data instanceof User) {
+            $plain = $data->getPassword();
+            if ('' !== $plain) {
+                $data->setPassword($this->hasher->hashPassword(
+                    $data,
+                    $plain
+                ));
+            }
+        }
+
+        return $this->persistProcessor->process(
+            $data,
+            $operation,
+            $uriVariables,
+            $context
+        );
+    }
+}