diff --git a/manifest/overlays/production/argocd-cm-patch.yaml b/manifest/overlays/production/argocd-cm-patch.yaml
index e2db20e..f90f005 100644
--- a/manifest/overlays/production/argocd-cm-patch.yaml
+++ b/manifest/overlays/production/argocd-cm-patch.yaml
@@ -103,3 +103,4 @@ data:
     requestedScopes: ["openid", "profile", "email", "groups"]
     requestedIDTokenClaims: {"groups": {"essential": true}}
     enablePKCEAuthentication: true
+    logoutURL: https://auth.olb42.com/oidc/v1/end_session
diff --git a/manifest/overlays/production/argocd-rbac-cm-patch.yaml b/manifest/overlays/production/argocd-rbac-cm-patch.yaml
index d7d64fe..4ec74d6 100644
--- a/manifest/overlays/production/argocd-rbac-cm-patch.yaml
+++ b/manifest/overlays/production/argocd-rbac-cm-patch.yaml
@@ -4,6 +4,7 @@ metadata:
   name: argocd-rbac-cm
   namespace: argocd
 data:
+  scopes: '[groups]'
   policy.csv: |
     p, role:app-manager, applications, *, */*, allow
     p, role:app-viewer, applications, get, */*, allow
@@ -12,5 +13,5 @@ data:
     g, argocd_users, role:app-viewer
     g, mcpserver, role:app-manager
     g, homepage, role:app-viewer
-  policy.default: role:readonly
-  scopes: '[groups]'
+  policy.default: ''
+  
\ No newline at end of file