diff --git a/conf/defaults.ini b/conf/defaults.ini
index c53b12d8ca9..2a092f3517d 100644
--- a/conf/defaults.ini
+++ b/conf/defaults.ini
@@ -872,6 +872,9 @@ permission_cache = true
 # Warning left to true, basic roles permissions will be reset on every boot
 reset_basic_roles = false
 
+# Validate permissions' action and scope on role creation and update
+permission_validation_enabled = true
+
 #################################### SMTP / Emailing #####################
 [smtp]
 enabled = false
diff --git a/conf/sample.ini b/conf/sample.ini
index c3a0b5717e7..ba02de55f5b 100644
--- a/conf/sample.ini
+++ b/conf/sample.ini
@@ -824,6 +824,9 @@
 # Warning left to true, basic roles permissions will be reset on every boot
 #reset_basic_roles = false
 
+# Validate permissions' action and scope on role creation and update
+; permission_validation_enabled = true
+
 #################################### SMTP / Emailing ##########################
 [smtp]
 ;enabled = false