diff --git a/src/authentic2_cut/utils.py b/src/authentic2_cut/utils.py
index 23c276d..e3a5eea 100644
--- a/src/authentic2_cut/utils.py
+++ b/src/authentic2_cut/utils.py
@@ -202,7 +202,7 @@ def update_roles():
                     target_ct=ou_ct,
                     target_id=scope.pk)
                 permissions.append(permission)
-                role.permissions = permissions
+                role.permissions.set(permissions)
             else:
                 role.permissions.clear()
             # remove self administration