diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2
index 1bcf36b150..d703c5d04c 100644
--- a/roles/koji_hub/templates/hub.conf.j2
+++ b/roles/koji_hub/templates/hub.conf.j2
@@ -129,7 +129,7 @@ channel =
 
 build_from_srpm =
     has_perm admin :: allow
-    tag *-infra && has_perm infra :: allow
+    tag *-infra-candidate && has_perm infra :: allow
     all :: deny
 
 {% endif %}