diff --git a/roles/jenkins/master/files/config.xml b/roles/jenkins/master/files/config.xml
index 69e52c4a63..f8a8c102c7 100644
--- a/roles/jenkins/master/files/config.xml
+++ b/roles/jenkins/master/files/config.xml
@@ -6,66 +6,17 @@
   <mode>EXCLUSIVE</mode>
   <useSecurity>true</useSecurity>
   <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy">
-    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Create:mizdebsk</permission>
-    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Create:msrb</permission>
-    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Delete:mizdebsk</permission>
-    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Delete:msrb</permission>
-    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.ManageDomains:mizdebsk</permission>
-    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.ManageDomains:msrb</permission>
-    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Update:mizdebsk</permission>
-    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Update:msrb</permission>
-    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.View:mizdebsk</permission>
-    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.View:msrb</permission>
-    <permission>hudson.model.Computer.Build:mizdebsk</permission>
-    <permission>hudson.model.Computer.Build:msrb</permission>
-    <permission>hudson.model.Computer.Configure:mizdebsk</permission>
-    <permission>hudson.model.Computer.Configure:msrb</permission>
-    <permission>hudson.model.Computer.Connect:mizdebsk</permission>
-    <permission>hudson.model.Computer.Connect:msrb</permission>
-    <permission>hudson.model.Computer.Create:mizdebsk</permission>
-    <permission>hudson.model.Computer.Create:msrb</permission>
-    <permission>hudson.model.Computer.Delete:mizdebsk</permission>
-    <permission>hudson.model.Computer.Delete:msrb</permission>
-    <permission>hudson.model.Computer.Disconnect:mizdebsk</permission>
-    <permission>hudson.model.Computer.Disconnect:msrb</permission>
+    <permission>hudson.model.Hudson.Administer:sysadmin-jenkins</permission>
+    <permission>hudson.model.Hudson.ConfigureUpdateCenter:sysadmin-jenkins</permission>
+    <permission>hudson.model.Hudson.Read:sysadmin-jenkins</permission>
+    <permission>hudson.model.Hudson.Read:anonymous</permission>
+    <permission>hudson.model.Hudson.RunScripts:sysadmin-jenkins</permission>
+    <permission>hudson.model.Item.Read:anonymous</permission>
+    <!-- temp until mizdebsk is added to sysadmin-jenkins -->
     <permission>hudson.model.Hudson.Administer:mizdebsk</permission>
-    <permission>hudson.model.Hudson.Administer:msrb</permission>
     <permission>hudson.model.Hudson.ConfigureUpdateCenter:mizdebsk</permission>
-    <permission>hudson.model.Hudson.ConfigureUpdateCenter:msrb</permission>
     <permission>hudson.model.Hudson.Read:mizdebsk</permission>
-    <permission>hudson.model.Hudson.Read:msrb</permission>
     <permission>hudson.model.Hudson.RunScripts:mizdebsk</permission>
-    <permission>hudson.model.Hudson.RunScripts:msrb</permission>
-    <permission>hudson.model.Hudson.UploadPlugins:mizdebsk</permission>
-    <permission>hudson.model.Hudson.UploadPlugins:msrb</permission>
-    <permission>hudson.model.Item.Build:mizdebsk</permission>
-    <permission>hudson.model.Item.Build:msrb</permission>
-    <permission>hudson.model.Item.Cancel:mizdebsk</permission>
-    <permission>hudson.model.Item.Cancel:msrb</permission>
-    <permission>hudson.model.Item.Configure:mizdebsk</permission>
-    <permission>hudson.model.Item.Configure:msrb</permission>
-    <permission>hudson.model.Item.Create:mizdebsk</permission>
-    <permission>hudson.model.Item.Create:msrb</permission>
-    <permission>hudson.model.Item.Delete:mizdebsk</permission>
-    <permission>hudson.model.Item.Delete:msrb</permission>
-    <permission>hudson.model.Item.Discover:mizdebsk</permission>
-    <permission>hudson.model.Item.Discover:msrb</permission>
-    <permission>hudson.model.Item.Read:mizdebsk</permission>
-    <permission>hudson.model.Item.Read:msrb</permission>
-    <permission>hudson.model.Item.Workspace:mizdebsk</permission>
-    <permission>hudson.model.Item.Workspace:msrb</permission>
-    <permission>hudson.model.Run.Delete:mizdebsk</permission>
-    <permission>hudson.model.Run.Delete:msrb</permission>
-    <permission>hudson.model.Run.Update:mizdebsk</permission>
-    <permission>hudson.model.Run.Update:msrb</permission>
-    <permission>hudson.model.View.Configure:mizdebsk</permission>
-    <permission>hudson.model.View.Configure:msrb</permission>
-    <permission>hudson.model.View.Create:mizdebsk</permission>
-    <permission>hudson.model.View.Create:msrb</permission>
-    <permission>hudson.model.View.Delete:mizdebsk</permission>
-    <permission>hudson.model.View.Delete:msrb</permission>
-    <permission>hudson.model.View.Read:mizdebsk</permission>
-    <permission>hudson.model.View.Read:msrb</permission>
   </authorizationStrategy>
   <securityRealm class="hudson.plugins.openid.OpenIdSsoSecurityRealm" plugin="openid@2.1.1">
     <endpoint>http://id.fedoraproject.org/</endpoint>