diff --git a/chart/cas-cif/Chart.lock b/chart/cas-cif/Chart.lock
index b82534374..bd39a957e 100644
--- a/chart/cas-cif/Chart.lock
+++ b/chart/cas-cif/Chart.lock
@@ -11,5 +11,5 @@ dependencies:
 - name: certbot
   repository: https://bcdevops.github.io/certbot
   version: 0.1.3
-digest: sha256:22a3c8a861907a570a2415e8c4b5c0a5c7f6ae164207507f093b0bfaa752c8cf
-generated: "2024-02-23T14:03:27.259123-08:00"
+digest: sha256:d2da5fb2e1380ca061fdadb0e4cbe54137f1e3d43f90afe245339ddb320a771b
+generated: "2024-12-16T11:23:41.617911-08:00"
diff --git a/schema/deploy/create_roles.sql b/schema/deploy/create_roles.sql
index 5ad396b87..1a341b59b 100644
--- a/schema/deploy/create_roles.sql
+++ b/schema/deploy/create_roles.sql
@@ -12,7 +12,7 @@ begin
     from   pg_catalog.pg_roles
     where  rolname = 'cif_internal') then
 
-    create role cif_internal;
+    create role cif_internal with admin current_user;
   end if;
 
   if not exists (
@@ -20,7 +20,7 @@ begin
     from   pg_catalog.pg_roles
     where  rolname = 'cif_external') then
 
-    create role cif_external;
+    create role cif_external with admin current_user;
   end if;
 
   if not exists (
@@ -28,7 +28,7 @@ begin
     from   pg_catalog.pg_roles
     where  rolname = 'cif_admin') then
 
-    create role cif_admin;
+    create role cif_admin with admin current_user;
   end if;
 
   if not exists (
@@ -36,7 +36,7 @@ begin
     from   pg_catalog.pg_roles
     where  rolname = 'cif_guest') then
 
-    create role cif_guest;
+    create role cif_guest with admin current_user;
   end if;
 
   if not exists (
@@ -44,7 +44,7 @@ begin
     from   pg_catalog.pg_roles
     where  rolname = 'cifapp') then
 
-    create user cifapp;
+    create user cifapp with admin current_user;
   end if;
 
   grant cif_admin, cif_internal, cif_external, cif_guest to cifapp;