diff --git a/nix/module.nix b/nix/module.nix
index 6643ca317..27b5d6f4c 100644
--- a/nix/module.nix
+++ b/nix/module.nix
@@ -367,8 +367,9 @@ in
 
       ensureDatabases = [ cfg.database.database ];
       ensureUsers = [
-        { name = cfg.database.user;
-          ensurePermissions = { "DATABASE ${cfg.database.database}" = "ALL PRIVILEGES"; }; 
+        {
+          name = cfg.database.user;
+          ensureDBOwnership = true;
         }
       ];
     };