diff --git a/clusters/atlas/flux-system/applications/vault/kustomization.yaml b/clusters/atlas/flux-system/applications/vault/kustomization.yaml
index c3408a6e..ccb7ae0c 100644
--- a/clusters/atlas/flux-system/applications/vault/kustomization.yaml
+++ b/clusters/atlas/flux-system/applications/vault/kustomization.yaml
@@ -19,7 +19,7 @@ spec:
   healthChecks:
     - apiVersion: batch/v1
       kind: Job
-      name: vault-k8s-auth-hermes-10
+      name: vault-k8s-auth-hermes-11
       namespace: vault
   dependsOn:
     - name: longhorn
diff --git a/services/vault/hermes-auth-role-bootstrap-job.yaml b/services/vault/hermes-auth-role-bootstrap-job.yaml
index c383f0e7..ebf24d89 100644
--- a/services/vault/hermes-auth-role-bootstrap-job.yaml
+++ b/services/vault/hermes-auth-role-bootstrap-job.yaml
@@ -3,7 +3,7 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: vault-k8s-auth-hermes-10
+  name: vault-k8s-auth-hermes-11
   namespace: vault
 spec:
   backoffLimit: 2
diff --git a/services/vault/scripts/vault_k8s_auth_configure.sh b/services/vault/scripts/vault_k8s_auth_configure.sh
index 37551b3d..8e8d87dd 100644
--- a/services/vault/scripts/vault_k8s_auth_configure.sh
+++ b/services/vault/scripts/vault_k8s_auth_configure.sh
@@ -294,7 +294,7 @@ vault_cmd write "auth/kubernetes/role/hermes-jenkins-token-seed" \
   policies="hermes-jenkins-token-seed" \
   ttl="${role_ttl}"
 write_policy_and_role "hermes-scm-broker" "hermes-scm" "hermes-scm-broker" \
-  "hermes/developer-gitea" ""
+  "hermes/developer-gitea hermes/scm-task-grant" ""
 write_policy_and_role "hermes-credential-sync" "hermes" "hermes-agent" \
   "" "hermes/agent-tokens"
 write_policy_and_role "hermes-node-ssh" "hermes" "hermes-node-ssh-access" \