diff --git a/templates/group_created.json.j2 b/templates/group_created.json.j2
index ddb913a..a887bae 100644
--- a/templates/group_created.json.j2
+++ b/templates/group_created.json.j2
@@ -122,6 +122,27 @@
                 }
         }
     },
+    {
+		  "name" : "pyrest",
+		  "taskReferenceName" : "create_permission",
+		  "type" : "SIMPLE",
+		  "inputParameters" : {
+			  "url" : "${init.input.keycloak_admin}/clients/${extract_client_id.output.result.client_id}/authz/resource-server/permission/resource",
+			  "body" : {
+           "name": "Default Permission",
+           "description": "",
+           "type" : "resource",
+           "logic": "POSITIVE",
+           "decisionStrategy": "AFFIRMATIVE",
+           "resources" : ["${get_default_resource.output.body.id}"]
+        },
+			  "method" : "POST",
+			  "headers" : {
+				  "Authorization" : "Bearer ${authorize.output.body.access_token}",
+				  "Content-Type" : "application/json"
+			  }
+		  }
+	  },
 		{
 			"name" : "fork_join",
 			"taskReferenceName" : "fork_role_creation",
@@ -428,26 +449,6 @@
 			"name" : "join",
 			"taskReferenceName" : "join_role_creation",
 			"type" : "JOIN"
-		},
-		{
-		  "name" : "pyrest",
-		  "taskReferenceName" : "create_permission",
-		  "type" : "SIMPLE",
-		  "inputParameters" : {
-			  "url" : "${init.input.keycloak_admin}/clients/${extract_client_id.output.result.client_id}/authz/resource-server/permission/resource",
-			  "body" : {
-           "name": "Default Permission",
-           "description": "",
-           "type" : "resource",
-           "logic": "POSITIVE",
-           "decisionStrategy": "AFFIRMATIVE"
-        },
-			  "method" : "POST",
-			  "headers" : {
-				  "Authorization" : "Bearer ${authorize.output.body.access_token}",
-				  "Content-Type" : "application/json"
-			  }
-		  }
-	  }
+		}
 	]
 }