diff --git a/appview/state/knotstream.go b/appview/state/knotstream.go
index 58f2311b..3793459b 100644
--- a/appview/state/knotstream.go
+++ b/appview/state/knotstream.go
@@ -463,6 +463,10 @@ func ingestDIDAssign(d *db.DB, enforcer *rbac.Enforcer, source ec.Source, msg ec
 		}
 	}
 
+	if err := enforcer.E.SavePolicy(); err != nil {
+		return fmt.Errorf("save RBAC policies after didAssign: %w", err)
+	}
+
 	logger.Info("didAssign processed successfully",
 		"repo_did", record.RepoDid,
 		"owner_did", record.OwnerDid,