diff --git a/packages/cue/bh/ad/ad.cue b/packages/cue/bh/ad/ad.cue
index b217ae008..8397fe781 100644
--- a/packages/cue/bh/ad/ad.cue
+++ b/packages/cue/bh/ad/ad.cue
@@ -1482,7 +1482,9 @@ ACLRelationships: [
 	WritePKIEnrollmentFlag,
 	WritePKINameFlag,
 	WriteOwnerLimitedRights,
-	OwnsLimitedRights
+	OwnsLimitedRights,
+	OwnsRaw,
+	WriteOwnerRaw
 ]
 
 // these edges are common to inbound/outbound/pathfinding