diff --git a/wcs/ctl/hobo_notify.py b/wcs/ctl/hobo_notify.py
index 0ee545998..7c8cb2be1 100644
--- a/wcs/ctl/hobo_notify.py
+++ b/wcs/ctl/hobo_notify.py
@@ -136,6 +136,7 @@ class CmdHoboNotify(Command):
                 role.emails_to_members = emails_to_members
                 if role.slug.startswith('_'):
                     role.internal = True
+                    role.allows_backoffice_access = False
                 role.store()
             elif action == 'deprovision':
                 # Deprovision