diff --git a/packages/web/src/adminSettingsRoutes.jsx b/packages/web/src/adminSettingsRoutes.jsx
index 560d4d23..408c40bf 100644
--- a/packages/web/src/adminSettingsRoutes.jsx
+++ b/packages/web/src/adminSettingsRoutes.jsx
@@ -31,7 +31,7 @@ export default (
     <Route
       path={URLS.CREATE_USER}
       element={
-        <Can I="create" a="User">
+        <Can I="manage" a="User">
           <CreateUser />
         </Can>
       }
@@ -40,7 +40,7 @@ export default (
     <Route
       path={URLS.USER_PATTERN}
       element={
-        <Can I="update" a="User">
+        <Can I="manage" a="User">
           <EditUser />
         </Can>
       }
@@ -58,7 +58,7 @@ export default (
     <Route
       path={URLS.CREATE_ROLE}
       element={
-        <Can I="create" a="Role">
+        <Can I="manage" a="Role">
           <CreateRole />
         </Can>
       }
@@ -67,7 +67,7 @@ export default (
     <Route
       path={URLS.ROLE_PATTERN}
       element={
-        <Can I="update" a="Role">
+        <Can I="manage" a="Role">
           <EditRole />
         </Can>
       }
@@ -76,7 +76,7 @@ export default (
     <Route
       path={URLS.USER_INTERFACE}
       element={
-        <Can I="update" a="Config">
+        <Can I="manage" a="Config">
           <UserInterface />
         </Can>
       }
@@ -86,8 +86,8 @@ export default (
       path={URLS.AUTHENTICATION}
       element={
         <Can I="read" a="SamlAuthProvider">
-          <Can I="update" a="SamlAuthProvider">
-            <Can I="create" a="SamlAuthProvider">
+          <Can I="manage" a="SamlAuthProvider">
+            <Can I="manage" a="SamlAuthProvider">
               <Authentication />
             </Can>
           </Can>
@@ -98,7 +98,7 @@ export default (
     <Route
       path={URLS.ADMIN_APPS}
       element={
-        <Can I="update" a="App">
+        <Can I="manage" a="App">
           <AdminApplications />
         </Can>
       }
@@ -107,7 +107,7 @@ export default (
     <Route
       path={`${URLS.ADMIN_APP_PATTERN}/*`}
       element={
-        <Can I="update" a="App">
+        <Can I="manage" a="App">
           <AdminApplication />
         </Can>
       }
@@ -116,7 +116,7 @@ export default (
     <Route
       path={`${URLS.ADMIN_TEMPLATES}/*`}
       element={
-        <Can I="update" a="Config">
+        <Can I="manage" a="Config">
           <AdminTemplates />
         </Can>
       }
@@ -125,7 +125,7 @@ export default (
     <Route
       path={`${URLS.ADMIN_CREATE_TEMPLATE_PATTERN}/*`}
       element={
-        <Can I="update" a="Config">
+        <Can I="manage" a="Config">
           <AdminCreateTemplate />
         </Can>
       }
@@ -134,7 +134,7 @@ export default (
     <Route
       path={`${URLS.ADMIN_UPDATE_TEMPLATE_PATTERN}/*`}
       element={
-        <Can I="update" a="Config">
+        <Can I="manage" a="Config">
           <AdminUpdateTemplate />
         </Can>
       }
diff --git a/packages/web/src/components/AdminTemplateContextMenu/index.jsx b/packages/web/src/components/AdminTemplateContextMenu/index.jsx
index df63ff7e..9ac9debc 100644
--- a/packages/web/src/components/AdminTemplateContextMenu/index.jsx
+++ b/packages/web/src/components/AdminTemplateContextMenu/index.jsx
@@ -41,7 +41,7 @@ function AdminTemplateContextMenu(props) {
       hideBackdrop={false}
       anchorEl={anchorEl}
     >
-      <Can I="delete" a="Flow" passThrough>
+      <Can I="manage" a="Flow" passThrough>
         {(allowed) => (
           <MenuItem disabled={!allowed} onClick={onTemplateDelete}>
             {formatMessage('adminTemplateContextMenu.delete')}
diff --git a/packages/web/src/components/AppConnectionContextMenu/index.jsx b/packages/web/src/components/AppConnectionContextMenu/index.jsx
index 8e7eb318..d5050e02 100644
--- a/packages/web/src/components/AppConnectionContextMenu/index.jsx
+++ b/packages/web/src/components/AppConnectionContextMenu/index.jsx
@@ -51,7 +51,7 @@ function ContextMenu(props) {
         )}
       </Can>
 
-      <Can I="update" a="Connection" passThrough>
+      <Can I="manage" a="Connection" passThrough>
         {(allowed) => (
           <MenuItem
             onClick={createActionHandler({ type: 'test' })}
@@ -62,7 +62,7 @@ function ContextMenu(props) {
         )}
       </Can>
 
-      <Can I="create" a="Connection" passThrough>
+      <Can I="manage" a="Connection" passThrough>
         {(allowed) => (
           <MenuItem
             component={Link}
@@ -79,7 +79,7 @@ function ContextMenu(props) {
         )}
       </Can>
 
-      <Can I="delete" a="Connection" passThrough>
+      <Can I="manage" a="Connection" passThrough>
         {(allowed) => (
           <MenuItem
             onClick={createActionHandler({ type: 'delete' })}
diff --git a/packages/web/src/components/AppConnections/index.jsx b/packages/web/src/components/AppConnections/index.jsx
index 2bc6e83c..f7cf9065 100644
--- a/packages/web/src/components/AppConnections/index.jsx
+++ b/packages/web/src/components/AppConnections/index.jsx
@@ -20,7 +20,7 @@ function AppConnections(props) {
 
   if (!hasConnections) {
     return (
-      <Can I="create" a="Connection" passThrough>
+      <Can I="manage" a="Connection" passThrough>
         {(allowed) => (
           <NoResultFound
             text={formatMessage('app.noConnections')}
diff --git a/packages/web/src/components/AppFlows/index.jsx b/packages/web/src/components/AppFlows/index.jsx
index 1926d3f4..3c4f5ba1 100644
--- a/packages/web/src/components/AppFlows/index.jsx
+++ b/packages/web/src/components/AppFlows/index.jsx
@@ -37,7 +37,7 @@ function AppFlows(props) {
 
   if (!hasFlows) {
     return (
-      <Can I="create" a="Flow" passThrough>
+      <Can I="manage" a="Flow" passThrough>
         {(allowed) => (
           <NoResultFound
             text={formatMessage('app.noFlows')}
diff --git a/packages/web/src/components/DeleteRoleButton/index.ee.jsx b/packages/web/src/components/DeleteRoleButton/index.ee.jsx
index 4e70c34d..53f41bfd 100644
--- a/packages/web/src/components/DeleteRoleButton/index.ee.jsx
+++ b/packages/web/src/components/DeleteRoleButton/index.ee.jsx
@@ -53,7 +53,7 @@ function DeleteRoleButton(props) {
 
   return (
     <>
-      <Can I="delete" a="Role" passThrough>
+      <Can I="manage" a="Role" passThrough>
         {(allowed) => (
           <IconButton
             disabled={!allowed || disabled}
diff --git a/packages/web/src/components/EditorLayout/index.jsx b/packages/web/src/components/EditorLayout/index.jsx
index d6702f7f..a784ffa2 100644
--- a/packages/web/src/components/EditorLayout/index.jsx
+++ b/packages/web/src/components/EditorLayout/index.jsx
@@ -126,7 +126,7 @@ export default function EditorLayout() {
             )}
           </Can>
 
-          <Can I="publish" a="Flow" passThrough>
+          <Can I="manage" a="Flow" passThrough>
             {(allowed) => (
               <Button
                 disabled={!allowed || !flow}
diff --git a/packages/web/src/components/FlowContextMenu/index.jsx b/packages/web/src/components/FlowContextMenu/index.jsx
index 74be5e0a..3972d4aa 100644
--- a/packages/web/src/components/FlowContextMenu/index.jsx
+++ b/packages/web/src/components/FlowContextMenu/index.jsx
@@ -130,7 +130,7 @@ function ContextMenu(props) {
           )}
         </Can>
 
-        <Can I="create" a="Flow" passThrough>
+        <Can I="manage" a="Flow" passThrough>
           {(allowed) => (
             <MenuItem disabled={!allowed} onClick={onFlowDuplicate}>
               {formatMessage('flow.duplicate')}
@@ -139,7 +139,7 @@ function ContextMenu(props) {
         </Can>
 
         {isCurrentUserAdmin && (
-          <Can I="create" a="Flow" passThrough>
+          <Can I="manage" a="Flow" passThrough>
             {(allowed) => (
               <MenuItem disabled={!allowed} onClick={onCreateTemplate}>
                 {formatMessage('flow.createTemplateFromFlow')}
@@ -148,7 +148,7 @@ function ContextMenu(props) {
           </Can>
         )}
 
-        <Can I="update" a="Flow" passThrough>
+        <Can I="manage" a="Flow" passThrough>
           {(allowed) => (
             <MenuItem disabled={!allowed} onClick={onFlowFolderUpdate}>
               {formatMessage('flow.moveTo')}
@@ -164,7 +164,7 @@ function ContextMenu(props) {
           )}
         </Can>
 
-        <Can I="delete" a="Flow" passThrough>
+        <Can I="manage" a="Flow" passThrough>
           {(allowed) => (
             <MenuItem disabled={!allowed} onClick={onFlowDelete}>
               {formatMessage('flow.delete')}
diff --git a/packages/web/src/pages/Application/index.jsx b/packages/web/src/pages/Application/index.jsx
index 7ef8683a..37cc26e0 100644
--- a/packages/web/src/pages/Application/index.jsx
+++ b/packages/web/src/pages/Application/index.jsx
@@ -139,7 +139,7 @@ export default function Application() {
                 <Route
                   path={`${URLS.FLOWS}/*`}
                   element={
-                    <Can I="create" a="Flow" passThrough>
+                    <Can I="manage" a="Flow" passThrough>
                       {(allowed) => (
                         <ConditionalIconButton
                           type="submit"
@@ -162,7 +162,7 @@ export default function Application() {
                 <Route
                   path={`${URLS.CONNECTIONS}/*`}
                   element={
-                    <Can I="create" a="Connection" passThrough>
+                    <Can I="manage" a="Connection" passThrough>
                       {(allowed) => (
                         <SplitButton
                           disabled={!allowed}
@@ -248,7 +248,7 @@ export default function Application() {
         <Route
           path="/connections/add"
           element={
-            <Can I="create" a="Connection">
+            <Can I="manage" a="Connection">
               <AddAppConnection
                 onClose={goToApplicationPage}
                 application={app}
@@ -260,7 +260,7 @@ export default function Application() {
         <Route
           path="/connections/:connectionId/reconnect"
           element={
-            <Can I="create" a="Connection">
+            <Can I="manage" a="Connection">
               <ReconnectConnection
                 application={app}
                 onClose={goToApplicationPage}
diff --git a/packages/web/src/pages/Applications/index.jsx b/packages/web/src/pages/Applications/index.jsx
index 399e64c4..43a89eae 100644
--- a/packages/web/src/pages/Applications/index.jsx
+++ b/packages/web/src/pages/Applications/index.jsx
@@ -53,7 +53,7 @@ export default function Applications() {
             alignItems="center"
             order={{ xs: 1, sm: 2 }}
           >
-            <Can I="create" a="Connection" passThrough>
+            <Can I="manage" a="Connection" passThrough>
               {(allowed) => (
                 <ConditionalIconButton
                   type="submit"
@@ -84,7 +84,7 @@ export default function Applications() {
         )}
 
         {!isLoading && !hasApps && (
-          <Can I="create" a="Connection" passThrough>
+          <Can I="manage" a="Connection" passThrough>
             {(allowed) => (
               <NoResultFound
                 text={formatMessage('apps.noConnections')}
diff --git a/packages/web/src/pages/CreateUser/index.jsx b/packages/web/src/pages/CreateUser/index.jsx
index b0afe719..6d10824e 100644
--- a/packages/web/src/pages/CreateUser/index.jsx
+++ b/packages/web/src/pages/CreateUser/index.jsx
@@ -125,7 +125,7 @@ export default function CreateUser() {
                   helperText={errors?.email?.message}
                 />
 
-                <Can I="update" a="Role">
+                <Can I="manage" a="Role">
                   <ControlledAutocomplete
                     name="roleId"
                     fullWidth
diff --git a/packages/web/src/pages/EditUser/index.jsx b/packages/web/src/pages/EditUser/index.jsx
index e2e06db1..920f353c 100644
--- a/packages/web/src/pages/EditUser/index.jsx
+++ b/packages/web/src/pages/EditUser/index.jsx
@@ -169,7 +169,7 @@ export default function EditUser() {
                     helperText={errors?.email?.message}
                   />
 
-                  <Can I="update" a="Role">
+                  <Can I="manage" a="Role">
                     <ControlledAutocomplete
                       name="roleId"
                       fullWidth