diff --git a/haf b/haf
index fd69207e2026ecdf046a74deacb54950b186d773..a247905233f6d38e34b6d535798e02fafa643664 160000
--- a/haf
+++ b/haf
@@ -1 +1 @@
-Subproject commit fd69207e2026ecdf046a74deacb54950b186d773
+Subproject commit a247905233f6d38e34b6d535798e02fafa643664
diff --git a/scripts/ci/start_postgrest.sh b/scripts/ci/start_postgrest.sh
index b55ceaf76027a91fbd502ef4f361fa1321a787fe..29632d5fc84ef12126ac7eddb2b40eed5b380412 100755
--- a/scripts/ci/start_postgrest.sh
+++ b/scripts/ci/start_postgrest.sh
@@ -5,7 +5,7 @@ set -o pipefail
 
 POSTGRES_HOST="localhost"
 POSTGRES_PORT=5432
-POSTGRES_USER="hivemind"
+POSTGRES_USER="hivemind_user"
 WEBSERVER_PORT=8080
 ADMIN_PORT=3001
 LOG_LEVEL="error"
@@ -32,7 +32,7 @@ while [ $# -gt 0 ]; do
         ;;
     --log-level=*)
         LOG_LEVEL="${1#*=}"
-        ;;  
+        ;;
     -*)
         echo "ERROR: '$1' is not a valid option"
         echo
@@ -49,7 +49,7 @@ done
 
 POSTGRES_ACCESS=${POSTGRES_URL:-"postgresql://$POSTGRES_USER@$POSTGRES_HOST:$POSTGRES_PORT/haf_block_log"}
 
-start_webserver() { 
+start_webserver() {
     export PGRST_DB_URI=$POSTGRES_ACCESS
     export PGRST_SERVER_PORT=$WEBSERVER_PORT
     export PGRST_ADMIN_SERVER_PORT=$ADMIN_PORT
diff --git a/scripts/setup_postgres.sh b/scripts/setup_postgres.sh
index d324f299f8d22a8dba739092d4437165336c24a1..0e08ce54b76d63e61643e0649a5bb14e8c2d7fa5 100755
--- a/scripts/setup_postgres.sh
+++ b/scripts/setup_postgres.sh
@@ -31,6 +31,7 @@ supplement_builtin_roles() {
   local pg_access="$1"
   echo "Attempting to supplement definition of hivemind builtin roles..."
   psql $pg_access -v ON_ERROR_STOP=on -c 'GRANT hivemind TO haf_admin;'
+  psql $pg_access -v ON_ERROR_STOP=on -c 'GRANT hivemind_user TO hivemind;'
 }
 
 POSTGRES_HOST="/var/run/postgresql"
@@ -75,6 +76,7 @@ else
 fi
 
 "$SCRIPTPATH/../haf/scripts/create_haf_app_role.sh" --postgres-url="$POSTGRES_ACCESS" --haf-app-account="hivemind"
+"$SCRIPTPATH/../haf/scripts/create_haf_app_role.sh" --postgres-url="$POSTGRES_ACCESS" --haf-app-account="hivemind_user" --base-group="hive_applications_group" --public
 
 #psql "$POSTGRES_ACCESS" -c "GRANT SET ON PARAMETER log_min_messages TO hivemind;"