diff --git a/common/models/user.json b/common/models/user.json
index 16545ab4..40eac49f 100644
--- a/common/models/user.json
+++ b/common/models/user.json
@@ -87,7 +87,13 @@
       "permission": "ALLOW",
       "property": "resetPassword",
       "accessType": "EXECUTE"
-    }
+    },
+    {
+      "principalType": "ROLE",
+      "principalId": "$owner",
+      "permission": "ALLOW",
+      "property": "replaceById"
+    }    
   ],
   "relations": {
     "accessTokens": {