diff --git a/marklogic/src/main/ml-config/security/roles/2-caselaw-reader-role.json b/marklogic/src/main/ml-config/security/roles/2-caselaw-reader-role.json
index cb8124d..7cb6912 100644
--- a/marklogic/src/main/ml-config/security/roles/2-caselaw-reader-role.json
+++ b/marklogic/src/main/ml-config/security/roles/2-caselaw-reader-role.json
@@ -1,5 +1,14 @@
 {
   "role-name" : "caselaw-reader",
   "description" : "Can view documents, not including unpublished documents, but not edit",
-  "role" : [ "rest-reader", "caselaw-nobody", "security", "dls-user", "dls-internal" ]
+  "role" : [ "rest-reader", "caselaw-nobody", "security", "dls-user", "dls-internal" ],
+  "privilege" : [ {
+    "privilege-name" : "xdbc:eval",
+    "action" : "http://marklogic.com/xdmp/privileges/xdbc-eval",
+    "kind" : "execute"
+  }, {
+    "privilege-name" : "xdbc:invoke",
+    "action" : "http://marklogic.com/xdmp/privileges/xdbc-invoke",
+    "kind" : "execute"
+  } ]
 }
\ No newline at end of file