diff --git a/internal/daemon/controller/handlers/users/user_service.go b/internal/daemon/controller/handlers/users/user_service.go
index 6bf6af927c..3956bfc4ed 100644
--- a/internal/daemon/controller/handlers/users/user_service.go
+++ b/internal/daemon/controller/handlers/users/user_service.go
@@ -507,8 +507,7 @@ func (s Service) ListResolvableAliases(ctx context.Context, req *pbs.ListResolva
 		}
 	}
 
-	permissions := acl.ListResolvablePermissions(resource.Target,
-		action.Difference(targets.IdActions, action.NewActionSet(action.NoOp)))
+	permissions := acl.ListResolvablePermissions(resource.Target, targets.IdActions)
 
 	if len(permissions) == 0 {
 		// if there are no permitted targets then there will be no aliases that