diff --git a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
index bf8484c..c266340 100644
--- a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
+++ b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
@@ -52,7 +52,7 @@ spec:
       use_refresh_token: "true"
       client_id: grafana
       client_secret: "thisisasecret" # $__file{/etc/secrets/auth_generic_oauth/client_secret}
-      scopes: openid email profile offline_access roles
+      scopes: openid email profile offline_access
       auth_url: https://dex.observability.t09.de/auth
       token_url: https://dex.observability.t09.de/token
       api_url: https://dex.observability.t09.de/userinfo