diff --git a/roles/openshift/project/templates/role-appowners.yml b/roles/openshift/project/templates/role-appowners.yml
index 36554c791b..eedf0e5abd 100644
--- a/roles/openshift/project/templates/role-appowners.yml
+++ b/roles/openshift/project/templates/role-appowners.yml
@@ -1,11 +1,5 @@
 apiVersion: v1
-{% if env == "staging" %}
 kind: Role
-{% else %}
-# Namespace-local roles did not work until openshift 3.6
-# https://github.com/openshift/origin/issues/14078
-kind: ClusterRole
-{% endif %}
 metadata:
   annotations:
     openshift.io/description: An application owner. Can view everything but ConfigMaps.
@@ -13,7 +7,7 @@ metadata:
   namespace: "{{ app }}"
 rules:
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - endpoints
@@ -34,7 +28,7 @@ rules:
   - update
 {% endif %}
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - bindings
@@ -151,7 +145,7 @@ rules:
   - list
   - watch
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - imagestreamimages
@@ -163,7 +157,7 @@ rules:
   - list
   - watch
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - imagestreams/status
@@ -172,14 +166,14 @@ rules:
   - list
   - watch
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - projects
   verbs:
   - get
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - appliedclusterresourcequotas
@@ -188,7 +182,7 @@ rules:
   - list
   - watch
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - routes
@@ -197,7 +191,7 @@ rules:
   - list
   - watch
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - routes/status
@@ -206,7 +200,7 @@ rules:
   - list
   - watch
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - processedtemplates
@@ -217,7 +211,7 @@ rules:
   - list
   - watch
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - buildlogs
@@ -226,7 +220,7 @@ rules:
   - list
   - watch
 - apiGroups:
-  - ""
+  - "*"
   attributeRestrictions: null
   resources:
   - resourcequotausages