diff --git a/gocd/pipelines/snuba.yaml b/gocd/pipelines/snuba.yaml
index a6da867d6c..bd82578791 100644
--- a/gocd/pipelines/snuba.yaml
+++ b/gocd/pipelines/snuba.yaml
@@ -192,6 +192,9 @@ pipelines:
             - migrate:
                   approval:
                       type: manual
+                      allow_only_on_success: true
+                      roles:
+                        - role-deploy-snuba-operator
                   fetch_materials: true
                   jobs:
                       migrate: