diff --git a/radar-auth/src/main/java/org/radarbase/auth/authorization/MPAuthorizationOracle.kt b/radar-auth/src/main/java/org/radarbase/auth/authorization/MPAuthorizationOracle.kt
index 25e1e53d0..fec7a02d8 100644
--- a/radar-auth/src/main/java/org/radarbase/auth/authorization/MPAuthorizationOracle.kt
+++ b/radar-auth/src/main/java/org/radarbase/auth/authorization/MPAuthorizationOracle.kt
@@ -53,6 +53,9 @@ class MPAuthorizationOracle(
         identity: RadarToken,
         permission: Permission
     ): AuthorityReferenceSet {
+        if (identity.isClientCredentials) {
+            return AuthorityReferenceSet(global = true)
+        }
         var global = false
         val organizations = mutableSetOf<String>()
         val projects = mutableSetOf<String>()