diff --git a/api/v1beta1/owner_role.go b/api/v1beta1/owner_role.go
index 74d3697a..da9e6cb0 100644
--- a/api/v1beta1/owner_role.go
+++ b/api/v1beta1/owner_role.go
@@ -40,11 +40,15 @@ func (in OwnerSpec) GetRoles(tenant Tenant, index int) []string {
 
 	roles := []string{"admin", "capsule-namespace-deleter"}
 
+	return roles
+}
+
+func (in OwnerSpec) GetClusterRoles(tenant Tenant) []string {
 	if tenant.Spec.GitOpsReady {
-		roles = append(roles, in.getGitOpsRoles(tenant)...)
+		return in.getGitOpsRoles(tenant)
 	}
 
-	return roles
+	return []string{}
 }
 
 func (in OwnerSpec) getGitOpsRoles(tenant Tenant) []string {