diff --git a/provision/000_base/system_access_control.yaml b/provision/000_base/system_access_control.yaml
index 51a493497..b668784ad 100644
--- a/provision/000_base/system_access_control.yaml
+++ b/provision/000_base/system_access_control.yaml
@@ -1,5 +1,11 @@
 allow:
   authenticated:
+    corteza::system/:
+      - applications.search
+      - auth-clients.search
+      - users.search
+      - roles.search
+
     corteza::system:user/*:
       - read
       - email.unmask