diff --git a/manifest.toml b/manifest.toml
index 8440ecb..7a47f97 100644
--- a/manifest.toml
+++ b/manifest.toml
@@ -63,6 +63,10 @@ ram.runtime = "50M" # FIXME: replace with an **estimate** minimum ram requiremen
 
     [resources.permissions]
     main.url = "/"
+    # Non-web, LDAP groups
+    teamlead.allowed = "nobody"
+    admin.allowed = "admins"
+    super_admin.allowed = "__ADMIN__"
 
     [resources.apt]
     packages = [
diff --git a/scripts/upgrade b/scripts/upgrade
index 10044a7..a43cf6f 100755
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -23,18 +23,6 @@ if [ "$database" == "sqlite" ]; then
     fi
 fi
 
-# #REMOVEME? if ! ynh_permission_exists --permission="teamlead"; then
-# #REMOVEME? 	ynh_permission_create --permission="teamlead"
-# fi
-
-# #REMOVEME? if ! ynh_permission_exists --permission="admin"; then
-# #REMOVEME? 	ynh_permission_create --permission="admin"
-# fi
-
-# #REMOVEME? if ! ynh_permission_exists --permission="super_admin"; then
-# #REMOVEME? 	ynh_permission_create --permission="super_admin" --allowed="$admin"
-# fi
-
 if [ -z "${registration:-}" ]; then
     registration=0
     ynh_app_setting_set --app="$app" --key=registration --value="$registration"