diff --git a/provision/300_automation/2000_access_control.yaml b/provision/300_automation/2000_access_control.yaml
index 9d7bdb77b..ebd0b0731 100644
--- a/provision/300_automation/2000_access_control.yaml
+++ b/provision/300_automation/2000_access_control.yaml
@@ -3,6 +3,7 @@ allow:
     corteza::automation/:
       - grant
       - workflow.create
+      - workflows.search
       - triggers.search
       - sessions.search
 
@@ -10,6 +11,7 @@ allow:
       - read
       - update
       - delete
+      - undelete
       - execute
       - triggers.manage
       - sessions.manage
@@ -18,6 +20,7 @@ allow:
     corteza::automation/:
       - grant
       - workflow.create
+      - workflows.search
       - triggers.search
       - sessions.search
 
@@ -25,6 +28,7 @@ allow:
       - read
       - update
       - delete
+      - undelete
       - execute
       - triggers.manage
       - sessions.manage