diff --git a/applications/templates/cloudnativepg.yaml b/applications/templates/cloudnativepg.yaml
index 4c592e8..80cf773 100644
--- a/applications/templates/cloudnativepg.yaml
+++ b/applications/templates/cloudnativepg.yaml
@@ -84,6 +84,18 @@ spec:
       wal:
         compression: bzip2
     retentionPolicy: "60d"
+  managed:
+    roles:
+    - name: marco
+      login: true
+      superuser: true
+      passwordSecret:
+        name: postgres-marco
+    - name: authentik
+      login: true
+      createdb: true
+      passwordSecret:
+        name: postgres-authentik
 ---
 apiVersion: objectbucket.io/v1alpha1
 kind: ObjectBucketClaim