diff --git a/config/assignable-organization-roles/roles/datum-cloud-editor.yaml b/config/assignable-organization-roles/roles/datum-cloud-editor.yaml
index 85f99c3..09c2d51 100644
--- a/config/assignable-organization-roles/roles/datum-cloud-editor.yaml
+++ b/config/assignable-organization-roles/roles/datum-cloud-editor.yaml
@@ -26,3 +26,7 @@ spec:
       namespace: milo-system
     - name: notes-editor
       namespace: milo-system
+    - name: identity-machine-account-keys-editor
+      namespace: milo-system
+    - name: iam-machine-accounts-editor
+      namespace: milo-system
diff --git a/config/assignable-organization-roles/roles/datum-cloud-owner.yaml b/config/assignable-organization-roles/roles/datum-cloud-owner.yaml
index 2b693de..cd3a0dc 100644
--- a/config/assignable-organization-roles/roles/datum-cloud-owner.yaml
+++ b/config/assignable-organization-roles/roles/datum-cloud-owner.yaml
@@ -30,3 +30,7 @@ spec:
       namespace: milo-system
     - name: notes-admin
       namespace: milo-system
+    - name: identity-machine-account-keys-admin
+      namespace: milo-system
+    - name: iam-machine-accounts-admin
+      namespace: milo-system
diff --git a/config/assignable-organization-roles/roles/datum-cloud-viewer.yaml b/config/assignable-organization-roles/roles/datum-cloud-viewer.yaml
index 97aaf89..f01dbaa 100644
--- a/config/assignable-organization-roles/roles/datum-cloud-viewer.yaml
+++ b/config/assignable-organization-roles/roles/datum-cloud-viewer.yaml
@@ -28,3 +28,7 @@ spec:
       namespace: milo-system
     - name: notes-viewer
       namespace: milo-system
+    - name: identity-machine-account-keys-viewer
+      namespace: milo-system
+    - name: iam-machine-accounts-viewer
+      namespace: milo-system