diff --git a/inventory/group_vars/pdc-backend b/inventory/group_vars/pdc-backend
index 987995e717..295b0276b8 100644
--- a/inventory/group_vars/pdc-backend
+++ b/inventory/group_vars/pdc-backend
@@ -11,7 +11,7 @@ host_group: pdc-backend
 
 tcp_ports: []
 
-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer,sysadmin-mbs
 
 # See the host_vars files for the value of fedmsg_error_recipients here
 
diff --git a/inventory/group_vars/pdc-backend-stg b/inventory/group_vars/pdc-backend-stg
index 865902f762..204d46a557 100644
--- a/inventory/group_vars/pdc-backend-stg
+++ b/inventory/group_vars/pdc-backend-stg
@@ -11,7 +11,7 @@ host_group: pdc-backend
 
 tcp_ports: []
 
-fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer,sysadmin-mbs
 
 # See the host_vars files for the value of fedmsg_error_recipients here
 
diff --git a/inventory/group_vars/pdc-web b/inventory/group_vars/pdc-web
index 7151f2fe15..58a367a3e3 100644
--- a/inventory/group_vars/pdc-web
+++ b/inventory/group_vars/pdc-web
@@ -13,7 +13,7 @@ wsgi_threads: 2
 
 tcp_ports: [ 80 ]
 
-fas_client_groups: sysadmin-noc,sysadmin-releng
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs
 
 # This just defines the CN of the saml2 cert we pull from the private repo
 # Don't be confused.  The app is actually served at apps.stg.fp.o/pdc
diff --git a/inventory/group_vars/pdc-web-stg b/inventory/group_vars/pdc-web-stg
index 2afec3241a..ac0f16c2cb 100644
--- a/inventory/group_vars/pdc-web-stg
+++ b/inventory/group_vars/pdc-web-stg
@@ -13,7 +13,7 @@ wsgi_threads: 2
 
 tcp_ports: [ 80 ]
 
-fas_client_groups: sysadmin-noc,sysadmin-releng
+fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs
 
 # This just defines the CN of the saml2 cert we pull from the private repo
 # Don't be confused.  The app is actually served at apps.stg.fp.o/pdc