diff --git a/app/(gcforms)/[locale]/(app administration)/admin/(no nav)/upload/page.tsx b/app/(gcforms)/[locale]/(app administration)/admin/(no nav)/upload/page.tsx
index e60a422acb..3a0681ab4f 100644
--- a/app/(gcforms)/[locale]/(app administration)/admin/(no nav)/upload/page.tsx	
+++ b/app/(gcforms)/[locale]/(app administration)/admin/(no nav)/upload/page.tsx	
@@ -20,9 +20,13 @@ export default async function Page() {
 
   const { ability } = await authCheckAndRedirect();
 
-  checkPrivilegesAsBoolean(ability, [{ action: "create", subject: "FormRecord" }], {
-    redirect: true,
-  });
+  checkPrivilegesAsBoolean(
+    ability,
+    [{ action: "update", subject: { type: "FormRecord", object: {} } }],
+    {
+      redirect: true,
+    }
+  );
   return (
     <>
       <h1>{t("upload.title")}</h1>
diff --git a/app/(gcforms)/[locale]/(app administration)/admin/(no nav)/view-templates/page.tsx b/app/(gcforms)/[locale]/(app administration)/admin/(no nav)/view-templates/page.tsx
index ce1357b287..bcdc17d3ce 100644
--- a/app/(gcforms)/[locale]/(app administration)/admin/(no nav)/view-templates/page.tsx	
+++ b/app/(gcforms)/[locale]/(app administration)/admin/(no nav)/view-templates/page.tsx	
@@ -21,11 +21,8 @@ export default async function Page() {
 
   checkPrivilegesAsBoolean(
     ability,
-    [
-      { action: "view", subject: "FormRecord" },
-      { action: "update", subject: "FormRecord" },
-    ],
-    { logic: "one", redirect: true }
+    [{ action: "update", subject: { type: "FormRecord", object: {} } }],
+    { redirect: true }
   );
 
   const templates = (await getAllTemplates(ability)).map((template) => {