diff --git a/argocd/argocd-rbac-cm.yaml b/argocd/argocd-rbac-cm.yaml
index 9528733..32cff15 100644
--- a/argocd/argocd-rbac-cm.yaml
+++ b/argocd/argocd-rbac-cm.yaml
@@ -7,9 +7,10 @@ metadata:
     app.kubernetes.io/name: argocd-rbac-cm
     app.kubernetes.io/part-of: argocd
 data:
-  policy.default: ""
+  policy.default: role:readonly
   policy.csv: |
     p, role:platform-engineer, applications, get, */*, allow
     p, role:platform-engineer, applications, sync, */*, allow
     p, role:platform-engineer, projects, get, *, allow
     g, platform-engineer, role:platform-engineer
+    g, roger, role:admin