diff --git a/envri-hub/deployments/envri-hub.yaml b/envri-hub/deployments/envri-hub.yaml
index 68776e35beab3b572a64779d66ff712bb460f79b..5b9ce2fb03c3094b6a9a44984f60f1be7fe34cff 100644
--- a/envri-hub/deployments/envri-hub.yaml
+++ b/envri-hub/deployments/envri-hub.yaml
@@ -69,9 +69,13 @@ hub:
         # valtri@civ.zcu.cz
         - 52cc7599bd1553c9d63e34e4c90b7e84d44967490c28bb4c53fe97b0c881d677@egi.eu
       allowed_groups:
+        - urn:egi.eu:group:envri-hub-next-all
+        - urn:egi.eu:group:envri-vre:role=member
+        - urn:egi.eu:group:vo.envrihub.eu:role=member
+        # previous entitlements:
         - urn:mace:egi.eu:group:envri-hub-next-all#sso.egi.eu
-        - urn:mace:egi.eu:group:vo.envrihub.eu:role=member#aai.egi.eu
         - urn:mace:egi.eu:group:envri-vre:role=member#aai.egi.eu
+        - urn:mace:egi.eu:group:vo.envrihub.eu:role=member#aai.egi.eu
       claim_groups_key: "eduperson_entitlement"
     EGICheckinAuthenticator:
       checkin_host: "{{ secrets['checkin_host']}}"