I made that change, but forgot to have the user log out and back in. Works as expected now!