diff --git a/agent/structs/intention.go b/agent/structs/intention.go
index 2549f8d5e..078bcbe50 100644
--- a/agent/structs/intention.go
+++ b/agent/structs/intention.go
@@ -325,7 +325,7 @@ func (ixn *Intention) CanRead(authz acl.Authorizer) bool {
 }
 
 func (ixn *Intention) CanWrite(authz acl.Authorizer) bool {
-	if authz == nil {
+	if authz == nil || authz == acl.ManageAll() {
 		return true
 	}
 	var authzContext acl.AuthorizerContext