diff --git a/java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/Activator.java b/java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/Activator.java
index 950e654b02f..8d788d12b90 100644
--- a/java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/Activator.java
+++ b/java/com.sap.sse.security.userstore.mongodb/src/com/sap/sse/security/userstore/mongodb/impl/Activator.java
@@ -16,6 +16,7 @@ import com.sap.sse.security.SecurityService;
 import com.sap.sse.security.UserStore;
 import com.sap.sse.security.shared.QualifiedObjectIdentifier;
 import com.sap.sse.security.shared.RoleDefinition;
+import com.sap.sse.security.shared.WildcardPermission;
 import com.sap.sse.security.shared.impl.PermissionAndRoleAssociation;
 import com.sap.sse.security.shared.impl.Role;
 import com.sap.sse.security.shared.impl.SecuredSecurityTypes;
@@ -80,6 +81,12 @@ public class Activator implements BundleActivator {
                                     .getQualifiedObjectIdentifier(associationTypeIdentifier);
                             securityService.migrateOwnership(associationQualifiedIdentifier, associationTypeIdentifier);
                         }
+                        for (WildcardPermission permission : user.getPermissions()) {
+                            String associationTypeIdentifier = PermissionAndRoleAssociation.get(permission, user);
+                            QualifiedObjectIdentifier associationQualifiedIdentifier = SecuredSecurityTypes.PERMISSION_ASSOCIATION
+                                    .getQualifiedObjectIdentifier(associationTypeIdentifier);
+                            securityService.migrateOwnership(associationQualifiedIdentifier, associationTypeIdentifier);
+                        }
                     }
 
                     securityService.assumeOwnershipMigrated(SecuredSecurityTypes.SERVER.getName());