diff --git a/adhoc-config/hermes-dashboard-rbac.yaml b/adhoc-config/hermes-dashboard-rbac.yaml
index 2efd640..60403ec 100644
--- a/adhoc-config/hermes-dashboard-rbac.yaml
+++ b/adhoc-config/hermes-dashboard-rbac.yaml
@@ -1,29 +1,29 @@
-# Grant ai-bot ServiceAccount (ai namespace) permissions to manage EndpointSlices
-# in home-apps namespace, so ArgoCD can sync the hermes-dashboard EndpointSlice.
+# Grant ai-bot ServiceAccount (ai namespace) FULL ADMIN ownership of home-apps namespace.
+# This makes ai-bot the owner of all resources in home-apps, enabling ArgoCD to manage
+# EndpointSlices and any other resources for services exposed via Ingress.
 #
-# The ai-bot ServiceAccount is used by the kubeconfig at ~/.kube/config.yaml
 # Apply: kubectl apply -f adhoc-config/hermes-dashboard-rbac.yaml
 #
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: hermes-dashboard-ep-admin
+  name: home-apps-admin
   namespace: home-apps
 rules:
-  - apiGroups: ["discovery.k8s.io"]
-    resources: ["endpointslices"]
-    verbs: ["get", "list", "watch", "create", "patch", "delete"]
+  - apiGroups: ["*"]
+    resources: ["*"]
+    verbs: ["*"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: hermes-dashboard-ep-admin
+  name: home-apps-admin
   namespace: home-apps
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: hermes-dashboard-ep-admin
+  name: home-apps-admin
 subjects:
   - kind: ServiceAccount
     name: ai-bot