diff --git a/xs-security.json b/xs-security.json
index 0b55ae87..57863c9d 100644
--- a/xs-security.json
+++ b/xs-security.json
@@ -1,5 +1,9 @@
 {
   "scopes": [
+    {
+      "name": "$XSAPPNAME.admin",
+      "description": "admin"
+    },
     {
       "name": "$XSAPPNAME.emcallback",
       "description": "Enterprise-Messaging Callback Access",
@@ -12,8 +16,22 @@
       "description": "Enterprise-Messaging Management Access"
     }
   ],
-  "attributes": [],
-  "role-templates": [],
+  "attributes": [
+    {
+      "name": "level",
+      "description": "level",
+      "valueType": "s"
+    }
+  ],
+  "role-templates": [
+    {
+      "name": "admin",
+      "scope-references": [
+        "$XSAPPNAME.admin"
+      ],
+      "description": "cap samples multi-service shared-db"
+    }
+  ],
   "authorities-inheritance": false,
   "authorities": [
     "$XSAPPNAME.emmanagement",