diff --git a/server/src/security/board-key-owner-authority.ts b/server/src/security/board-key-owner-authority.ts
index 391ac5aec7..9927f7d730 100644
--- a/server/src/security/board-key-owner-authority.ts
+++ b/server/src/security/board-key-owner-authority.ts
@@ -127,7 +127,7 @@ export async function ownerHasRequiredGrant(
     const rolesByCompany = new Map(rows.map((row) => [row.companyId, row.membershipRole]));
     return companyIds.every((companyId) => {
       const role = rolesByCompany.get(companyId);
-      return typeof role === "string" && requirement.roles.includes(role);
+      return typeof role === "string" && requirement.roles.some((allowedRole) => allowedRole === role);
     });
   }
   const { permissionKeys } = requirement;