diff --git a/src/middlewared/middlewared/plugins/account_/privilege.py b/src/middlewared/middlewared/plugins/account_/privilege.py
index 94980a8c54b39..18722dd13b33b 100644
--- a/src/middlewared/middlewared/plugins/account_/privilege.py
+++ b/src/middlewared/middlewared/plugins/account_/privilege.py
@@ -7,8 +7,8 @@
 from middlewared.plugins.account import unixhash_is_valid
 from middlewared.service import CallError, CRUDService, filter_list, private, ValidationErrors
 from middlewared.service_exception import MatchNotFound
+from middlewared.utils.privilege_constants import ALLOW_LIST_FULL_ADMIN, LocalAdminGroups
 from middlewared.utils.privilege import (
-    LocalAdminGroups,
     privilege_has_webui_access,
     privileges_group_mapping
 )
@@ -382,7 +382,7 @@ async def compose_privilege(self, privileges):
     async def full_privilege(self):
         return {
             'roles': {'FULL_ADMIN'},
-            'allowlist': [{'method': '*', 'resource': '*'}],
+            'allowlist': [ALLOW_LIST_FULL_ADMIN.copy()],
             'web_shell': True,
             'webui_access': True,
         }
diff --git a/src/middlewared/middlewared/role.py b/src/middlewared/middlewared/role.py
index 353a4ccbc42ba..e4edf988ab208 100644
--- a/src/middlewared/middlewared/role.py
+++ b/src/middlewared/middlewared/role.py
@@ -1,5 +1,6 @@
 from collections import defaultdict
 from dataclasses import dataclass, field
+from middlewared.utils.privilege_constants import ALLOW_LIST_FULL_ADMIN
 from middlewared.utils.security import STIGType
 import typing
 
@@ -351,7 +352,7 @@ def allowlist_for_role(self, role: str, enabled_stig: STIGType) -> typing.List[d
                 ], [])
 
             # Only non-stig FULL_ADMIN privilege can access REST endpoints
-            return [{"method": "*", "resource": "*"}]
+            return [ALLOW_LIST_FULL_ADMIN.copy()]
 
         return sum([
             self.methods.allowlists_for_roles[role] + self.events.allowlists_for_roles[role]
diff --git a/src/middlewared/middlewared/utils/allowlist.py b/src/middlewared/middlewared/utils/allowlist.py
index 6920172ad13e5..193abe8459324 100644
--- a/src/middlewared/middlewared/utils/allowlist.py
+++ b/src/middlewared/middlewared/utils/allowlist.py
@@ -2,8 +2,7 @@
 import re
 
 from middlewared.api.current import HttpVerb
-
-ALLOW_LIST_FULL_ADMIN = {'method': '*', 'resource': '*'}
+from middlewared.utils.privilege_constants import ALLOW_LIST_FULL_ADMIN
 
 
 class Allowlist:
diff --git a/src/middlewared/middlewared/utils/privilege.py b/src/middlewared/middlewared/utils/privilege.py
index 1816bfccd5bb5..a734d3ccd7860 100644
--- a/src/middlewared/middlewared/utils/privilege.py
+++ b/src/middlewared/middlewared/utils/privilege.py
@@ -1,12 +1,7 @@
-import enum
 from middlewared.auth import TruenasNodeSessionManagerCredentials
 from middlewared.role import ROLES
 
 
-class LocalAdminGroups(enum.IntEnum):
-    BUILTIN_ADMINISTRATORS = 544
-
-
 def privilege_has_webui_access(privilege: dict) -> bool:
     """
     This method determines whether the specified privilege is sufficient
diff --git a/src/middlewared/middlewared/utils/privilege_constants.py b/src/middlewared/middlewared/utils/privilege_constants.py
new file mode 100644
index 0000000000000..c383883b5b27a
--- /dev/null
+++ b/src/middlewared/middlewared/utils/privilege_constants.py
@@ -0,0 +1,7 @@
+import enum
+
+ALLOW_LIST_FULL_ADMIN = {'method': '*', 'resource': '*'}
+
+
+class LocalAdminGroups(enum.IntEnum):
+    BUILTIN_ADMINISTRATORS = 544