diff --git a/backend/migrations/20260325000000_app_bundles_grants.down.sql b/backend/migrations/20260325000000_app_bundles_grants.down.sql
new file mode 100644
index 0000000000..92e34705fe
--- /dev/null
+++ b/backend/migrations/20260325000000_app_bundles_grants.down.sql
@@ -0,0 +1,3 @@
+-- Revoke grants for app_bundles table
+REVOKE ALL ON app_bundles FROM windmill_user;
+REVOKE ALL ON app_bundles FROM windmill_admin;
diff --git a/backend/migrations/20260325000000_app_bundles_grants.up.sql b/backend/migrations/20260325000000_app_bundles_grants.up.sql
new file mode 100644
index 0000000000..2ad56563db
--- /dev/null
+++ b/backend/migrations/20260325000000_app_bundles_grants.up.sql
@@ -0,0 +1,3 @@
+-- Add grants for app_bundles table
+GRANT ALL ON app_bundles TO windmill_user;
+GRANT ALL ON app_bundles TO windmill_admin;