diff --git a/packages/server/src/api/controllers/instance.js b/packages/server/src/api/controllers/instance.js
index fbee2f72f5..e9c39bde66 100644
--- a/packages/server/src/api/controllers/instance.js
+++ b/packages/server/src/api/controllers/instance.js
@@ -17,6 +17,17 @@ exports.create = async function(ctx) {
   const { clientId } = await masterDb.get(appId)
 
   const db = new CouchDB(instanceId)
+  await db.put({
+    _id: "_security",
+    admins: {
+      names: [],
+      roles: [],
+    },
+    members: {
+      names: [],
+      roles: [],
+    },
+  })
   await db.put({
     _id: "_design/database",
     metadata: {