diff --git a/internal/auth/oidc.go b/internal/auth/oidc.go
index bb4b5d95..2786c09a 100644
--- a/internal/auth/oidc.go
+++ b/internal/auth/oidc.go
@@ -79,7 +79,7 @@ func NewOIDC(a *Authentication) *OIDC {
 		ClientID:     clientID,
 		ClientSecret: clientSecret,
 		Endpoint:     provider.Endpoint(),
-		Scopes:       []string{oidc.ScopeOpenID, "profile"},
+		Scopes:       []string{oidc.ScopeOpenID, "profile", "roles"},
 	}
 
 	oa := &OIDC{provider: provider, client: client, clientID: clientID, authentication: a}