diff --git a/k8s/core/argocd/values.yaml b/k8s/core/argocd/values.yaml
index 0e8b1ed..734efd9 100644
--- a/k8s/core/argocd/values.yaml
+++ b/k8s/core/argocd/values.yaml
@@ -32,7 +32,19 @@ configs:
     create: true
     policy.default: ""
     policy.csv: |
-      g, k8s_dashboard, role:admin
+      p, minecraft_manager, applications, get, */minecraft, allow
+      p, minecraft_manager, applications, update, */minecraft, allow
+      p, minecraft_manager, applications, sync, */minecraft, allow
+      p, minecraft_manager, applications, action/*, */minecraft, allow
+      p, minecraft_manager, logs, get, */minecraft, allow
+      p, minecraft_manager, applications, *, *, deny
+      p, minecraft_manager, applications, get, */minecraft, allow
+      p, minecraft_manager, applications, update, */minecraft, allow
+      p, minecraft_manager, applications, sync, */minecraft, allow
+      p, minecraft_manager, applications, action/*, */minecraft, allow
+      p, minecraft_manager, logs, get, */minecraft, allow
+      g, Minecraft Manager, role:minecraft-manager
+      g, ArgoCD Admins, role:admin
 
   secret:
     createSecret: true