diff --git a/src/roles.js b/src/roles.js
index 596f8a456..16d27f75a 100644
--- a/src/roles.js
+++ b/src/roles.js
@@ -148,7 +148,7 @@ export const NO_ROLE = {
   roleAssignment: [],
   sync: {
     auth: 'allowed',
-    config: 'allowed',
+    config: 'blocked',
     data: 'blocked',
     blobIndex: 'blocked',
     blob: 'blocked',
diff --git a/test-e2e/members.js b/test-e2e/members.js
index c94180309..993736689 100644
--- a/test-e2e/members.js
+++ b/test-e2e/members.js
@@ -302,7 +302,7 @@ test('roles - new device without role', async (t) => {
     ownRole.sync,
     {
       auth: 'allowed',
-      config: 'allowed',
+      config: 'blocked',
       data: 'blocked',
       blobIndex: 'blocked',
       blob: 'blocked',