Like someone said in your comment you can create NotAdminCheck
. Best way is to have roles and permission defined for more fine control over what each role is authorised to access.
A good step by step tutorial can be found in the link - https://www.honeybadger.io/blog/laravel-permissions-roles/