diff --git a/src/yunohost/backup.py b/src/yunohost/backup.py
index c254c2ab5..257797d04 100644
--- a/src/yunohost/backup.py
+++ b/src/yunohost/backup.py
@@ -1250,7 +1250,8 @@ class RestoreManager():
         for permission_name, permission_infos in old_apps_permission.items():
             app_name = permission_name.split(".")[0]
             if _is_installed(app_name):
-                permission_create(permission_name, url=permission_infos["url"], allowed=permission_infos["allowed"], sync_perm=False)
+                permission_create(permission_name, url=permission_infos["url"], allowed=permission_infos["allowed"],
+                                  protected=permission_infos["protected"], sync_perm=False)
 
         permission_sync_to_user()
 
@@ -1372,7 +1373,8 @@ class RestoreManager():
                     else:
                         should_be_allowed = [g for g in permission_infos["allowed"] if g in existing_groups]
 
-                    permission_create(permission_name, url=permission_infos.get("url", None), allowed=should_be_allowed, sync_perm=False)
+                    permission_create(permission_name, url=permission_infos.get("url", None), allowed=should_be_allowed,
+                                      protected=permission_infos.get("protected", True), sync_perm=False)
 
                 permission_sync_to_user()
 
diff --git a/src/yunohost/data_migrations/0011_setup_group_permission.py b/src/yunohost/data_migrations/0011_setup_group_permission.py
index c55e33cab..501dadaf4 100644
--- a/src/yunohost/data_migrations/0011_setup_group_permission.py
+++ b/src/yunohost/data_migrations/0011_setup_group_permission.py
@@ -116,7 +116,7 @@ class MyMigration(Migration):
                 allowed = [user for user in permission.split(',') if user in known_users]
             else:
                 allowed = ["all_users"]
-            permission_create(app+".main", url=url, allowed=allowed, sync_perm=False)
+            permission_create(app+".main", url=url, allowed=allowed, protected=False, sync_perm=False)
 
             app_setting(app, 'allowed_users', delete=True)