diff --git a/web/blueprints/site_admin.py b/web/blueprints/site_admin.py
index e48c4b7..4967f30 100644
--- a/web/blueprints/site_admin.py
+++ b/web/blueprints/site_admin.py
@@ -216,10 +216,14 @@ def user_delete(user_id):
 # Als Gruppe anzeigen (Site-Admin liest Gruppen-DB)
 # ──────────────────────────────────────────────────────────────
 
-@site_admin.route("/view-group/<int:group_id>", methods=["POST"])
+@site_admin.route("/view-group/<int:group_id>", methods=["GET", "POST"])
 @admin_required
 def view_group(group_id):
     """Site Admin temporarily switches into a group to view its MC data."""
+    if request.method == "GET":
+        flash("Please use the Browse button from the admin panel.", "warning")
+        return redirect(url_for("site_admin.dashboard"))
+
     group = db.get_group_by_id(group_id)
     if not group:
         flash("Group not found.", "danger")
@@ -239,10 +243,14 @@ def view_group(group_id):
     return redirect(url_for("panel.dashboard"))
 
 
-@site_admin.route("/stop-view", methods=["POST"])
+@site_admin.route("/stop-view", methods=["GET", "POST"])
 @admin_required
 def stop_view():
     """Kehrt zum Site-Admin-Dashboard zurück."""
+    if request.method == "GET":
+        flash("Please use the Back to Admin button.", "warning")
+        return redirect(url_for("site_admin.dashboard"))
+
     session.pop("group_id", None)
     session.pop("group_name", None)
     session.pop("role", None)
diff --git a/web/templates/admin/dashboard.html b/web/templates/admin/dashboard.html
index f977f6c..7de1eca 100644
--- a/web/templates/admin/dashboard.html
+++ b/web/templates/admin/dashboard.html
@@ -63,9 +63,12 @@
                             {% endif %}
                         </td>
                         <td class="text-end">
-                            <a href="{{ url_for('site_admin.view_group', group_id=g.id) }}" class="btn btn-sm btn-outline-info" title="Browse">
-                                <i class="bi bi-eye"></i>
-                            </a>
+                            <form method="post" action="{{ url_for('site_admin.view_group', group_id=g.id) }}" class="d-inline">
+                                <input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
+                                <button type="submit" class="btn btn-sm btn-outline-info" title="Browse">
+                                    <i class="bi bi-eye"></i>
+                                </button>
+                            </form>
                             <a href="{{ url_for('site_admin.group_edit', group_id=g.id) }}" class="btn btn-sm btn-outline-secondary" title="Edit">
                                 <i class="bi bi-pencil"></i>
                             </a>