diff --git a/ardac2prd/cluster-level-resources/cluster-values.yaml b/ardac2prd/cluster-level-resources/cluster-values.yaml
index fe94b5c..c7af6c0 100644
--- a/ardac2prd/cluster-level-resources/cluster-values.yaml
+++ b/ardac2prd/cluster-level-resources/cluster-values.yaml
@@ -21,6 +21,9 @@ calico:
   configuration:
     enabled: false
 
+custom-objects:
+  enabled: true
+
 cert-manager:
   enabled: true
 
diff --git a/ardac2prd/cluster-values/custom-objects/developer-rbac.yaml b/ardac2prd/cluster-values/custom-objects/developer-rbac.yaml
new file mode 100644
index 0000000..c8b6af3
--- /dev/null
+++ b/ardac2prd/cluster-values/custom-objects/developer-rbac.yaml
@@ -0,0 +1,142 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ardac-developer-power-role
+  namespace: default
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - pods/exec
+    verbs:
+      - create
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - batch
+    resources:
+      - cronjobs
+      - jobs
+    verbs:
+      - create
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - pods/log
+    verbs:
+      - get
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+      - endpoints
+      - events
+      - persistentvolumeclaims
+      - serviceaccounts
+      - services
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - apps
+    resources:
+      - controllerrevisions
+      - daemonsets
+      - deployments
+      - replicasets
+      - statefulsets
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - autoscaling
+    resources:
+      - horizontalpodautoscalers
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - discovery.k8s.io
+    resources:
+      - endpointslices
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - external-secrets.io
+    resources:
+      - externalsecrets
+      - secretstores
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - networking.k8s.io
+    resources:
+      - ingresses
+      - networkpolicies
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - policy
+    resources:
+      - poddisruptionbudgets
+    verbs:
+      - get
+      - list
+      - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ardac-developers-local-power
+  namespace: default
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ardac-developer-power-role
+subjects:
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: ardac-developers
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ardac-developer-argocd-view-role
+  namespace: argocd
+rules:
+  - apiGroups:
+      - argoproj.io
+    resources:
+      - applications
+    verbs:
+      - get
+      - list
+      - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ardac-developers-argocd-view
+  namespace: argocd
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ardac-developer-argocd-view-role
+subjects:
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: ardac-developers
diff --git a/ardac2prd/portal.ardac.org/values.yaml b/ardac2prd/portal.ardac.org/values.yaml
index 8e82bbb..7791044 100644
--- a/ardac2prd/portal.ardac.org/values.yaml
+++ b/ardac2prd/portal.ardac.org/values.yaml
@@ -14,6 +14,7 @@ global:
   dev: false
   externalSecrets:
     deploy: true
+    apiVersion: external-secrets.io/v1beta1
   postgres:
     dbCreate: false
     externalSecret: "ardac2prd-aurora-master-password"