diff --git a/invenio.cfg b/invenio.cfg
index 3e6bae1..8b38f04 100644
--- a/invenio.cfg
+++ b/invenio.cfg
@@ -747,7 +747,7 @@ class InvenioRDMStarterRecordPermissionPolicy(RDMRecordPermissionPolicy):
     can_update_draft = can_review
     # Allow uploading, updating and deleting files in drafts
     can_draft_create_files = can_review
-    can_draft_set_content_files = [SystemProcess()]
+    can_draft_set_content_files = can_manage + [SystemProcess()]
     can_draft_get_content_files = [SystemProcess()]
     can_draft_commit_files = [SystemProcess()]
     can_draft_update_files = can_review
@@ -773,7 +773,7 @@ class InvenioRDMStarterRecordPermissionPolicy(RDMRecordPermissionPolicy):
     # Allow creating a new version of an existing published record.
     can_new_version = [SystemProcess()]
     # Allow publishing a new record or changes to an existing record.
-    can_publish = [SystemProcess()]
+    can_publish = can_manage + [SystemProcess()]
     # Allow lifting a record or draft.
     can_lift_embargo = [SystemProcess()]