diff --git a/cmd/hspguard/main.go b/cmd/hspguard/main.go
index 6d68f01..b444cf9 100644
--- a/cmd/hspguard/main.go
+++ b/cmd/hspguard/main.go
@@ -45,6 +45,7 @@ func main() {
 	cache := cache.NewClient(&cfg)
 
 	user.EnsureAdminUser(ctx, &cfg, repo)
+	user.EnsureSystemPermissions(ctx, repo)
 
 	server := api.NewAPIServer(fmt.Sprintf("%s:%s", cfg.Host, cfg.Port), repo, fStorage, cache, &cfg)
 	if err := server.Run(); err != nil {