diff --git a/fiat-roles/src/main/java/com/netflix/spinnaker/fiat/config/UnrestrictedResourceConfig.java b/fiat-roles/src/main/java/com/netflix/spinnaker/fiat/config/UnrestrictedResourceConfig.java
index e16a4d754..e9f6a12e0 100644
--- a/fiat-roles/src/main/java/com/netflix/spinnaker/fiat/config/UnrestrictedResourceConfig.java
+++ b/fiat-roles/src/main/java/com/netflix/spinnaker/fiat/config/UnrestrictedResourceConfig.java
@@ -31,7 +31,9 @@ public class UnrestrictedResourceConfig {
   @Bean
   @ConditionalOnExpression("${fiat.writeMode.enabled:true}")
   String addUnrestrictedUser(PermissionsRepository permissionsRepository) {
-    permissionsRepository.put(new UserPermission().setId(UNRESTRICTED_USERNAME));
+    if (!permissionsRepository.get(UNRESTRICTED_USERNAME).isPresent()) {
+      permissionsRepository.put(new UserPermission().setId(UNRESTRICTED_USERNAME));
+    }
     return UNRESTRICTED_USERNAME;
   }
 }