diff --git a/packages/worker/src/api/controllers/admin/users.js b/packages/worker/src/api/controllers/admin/users.js
index d7b198dfdb..e1aa8c1150 100644
--- a/packages/worker/src/api/controllers/admin/users.js
+++ b/packages/worker/src/api/controllers/admin/users.js
@@ -42,6 +42,10 @@ exports.save = async ctx => {
     _id: _id || generateGlobalUserID(),
     password: hashedPassword,
   }
+  // make sure the roles object is always present
+  if (!user.roles) {
+    user.roles = {}
+  }
   // add the active status to a user if its not provided
   if (user.status == null) {
     user.status = UserStatus.ACTIVE