diff --git a/db/migrate/20230825112910_add_role_to_admin_users.rb b/db/migrate/20230825112910_add_role_to_admin_users.rb
new file mode 100644
index 0000000000..21f4ab8583
--- /dev/null
+++ b/db/migrate/20230825112910_add_role_to_admin_users.rb
@@ -0,0 +1,6 @@
+class AddRoleToAdminUsers < ActiveRecord::Migration
+  def change
+    add_column :admin_users, :role, :string, default: 'viewer'
+    AdminUser.update_all(role: 'admin')
+  end
+end
diff --git a/db/schema.rb b/db/schema.rb
index 1d7802528d..8e20eb54ff 100644
--- a/db/schema.rb
+++ b/db/schema.rb
@@ -11,7 +11,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 20230825102939) do
+ActiveRecord::Schema.define(version: 20230825112910) do
 
   # These are extensions that must be enabled in order to support this database
   enable_extension "plpgsql"
@@ -53,19 +53,20 @@
   add_index "action_results", ["government_form_id"], name: "index_action_results_on_government_form_id", using: :btree
 
   create_table "admin_users", force: :cascade do |t|
-    t.string   "email",                  default: "",      null: false
-    t.string   "encrypted_password",     default: "",      null: false
+    t.string   "email",                  default: "",       null: false
+    t.string   "encrypted_password",     default: "",       null: false
     t.string   "reset_password_token"
     t.datetime "reset_password_sent_at"
     t.datetime "remember_created_at"
-    t.datetime "created_at",                               null: false
-    t.datetime "updated_at",                               null: false
+    t.datetime "created_at",                                null: false
+    t.datetime "updated_at",                                null: false
     t.string   "token"
     t.string   "first_name"
     t.string   "last_name"
-    t.string   "provider",               default: "email", null: false
-    t.string   "uid",                    default: "",      null: false
+    t.string   "provider",               default: "email",  null: false
+    t.string   "uid",                    default: "",       null: false
     t.json     "tokens"
+    t.string   "role",                   default: "viewer"
   end
 
   add_index "admin_users", ["email"], name: "index_admin_users_on_email", unique: true, using: :btree