Django admin allows access to users marked as is_staff=True. To disable a user from being able to access the admin, you should set is_staff=False.
This holds true even if the user is a superuser. is_superuser=True. If a non-staff tries to access the admin, they see a message like this.
_images/access_no_is_staff.png