diff --git a/models/card/src/migration.ts b/models/card/src/migration.ts
index 4cd6e2c0df2..52488014eed 100644
--- a/models/card/src/migration.ts
+++ b/models/card/src/migration.ts
@@ -105,6 +105,11 @@ export const cardOperation: MigrateOperation = {
         state: 'migrate-role-types',
         mode: 'upgrade',
         func: migrateRoleTypes
+      },
+      {
+        state: 'fix-migrated-roles-permissions',
+        mode: 'upgrade',
+        func: migrateRolePermissions
       }
     ])
   }
@@ -399,3 +404,11 @@ async function migrateRoleTypes (client: Client): Promise<void> {
     await txOp.update(role, baseRoleData)
   }
 }
+
+async function migrateRolePermissions (client: Client): Promise<void> {
+  const txOp = new TxOperations(client, core.account.System)
+  const roles = await client.findAll(card.class.Role, { permissions: { $exists: false } })
+  for (const role of roles) {
+    await txOp.update(role, { permissions: [] })
+  }
+}