---
title: How-to-enable-enhanced-rbac-on-turbine-26
slug: turbine-user-guide/how-to-enable-enhanced-rbac-on-turbine-26
createdAt: 2026-10-30T12:04:14.320Z
---

**How to Enable Enhanced RBAC on Turbine 26.4.3 On-Prem**

**1. Prerequisites**

- Take a platform snapshot.
- Log in to Turbine as a Super Admin.
- Have the Turbine hostname and target account ID ready.

**2. Prepare Postman authentication**

- Configure Basic Auth as used during the call.
- In the browser, open **Developer Tools → Network**.
- Select an authenticated Turbine request and locate `JWT=<token>` in its request headers.
- Copy the JWT session cookie into Postman for the same Turbine hostname:

```javascript
Cookie: JWT=<token>
```

**3. Execute both requests in order**

Select **PUT**, leave the body empty, and replace the placeholders.

First, enable the migration flag:

![](https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/gNOsLF83JPdlCrNi7MS23_upload.png)

```javascript
PUT https://{host}/tenant/api/feature-flag/{account-id}/EnhancedRbacDataMigration?enabled=true
```

Then, enable Enhanced RBAC:

![](https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/PR3hwcC1WSVmdvD1XV73U_upload.png)

```javascript
PUT https://{host}/tenant/api/feature-flag/{account-id}/EnhancedRbac?enabled=true
```

**4. Validate**

- Confirm both requests return successful responses.
- Log out of Turbine and log back in.
- Verify Enhanced RBAC is available, and permissions work as expected.

**Migration check:**

```javascript
kubectl -n default logs -l app=identity-rbac-migration --tail=200
```

**This is how it looks in the roles:**

![](https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/pMlYid3C2lEPoJL4W96Jm_upload.png)