diff --git a/services/src/main/java/org/keycloak/services/resources/admin/AttackDetectionResource.java b/services/src/main/java/org/keycloak/services/resources/admin/AttackDetectionResource.java
index bc77c336c5..2a8e9245dd 100755
--- a/services/src/main/java/org/keycloak/services/resources/admin/AttackDetectionResource.java
+++ b/services/src/main/java/org/keycloak/services/resources/admin/AttackDetectionResource.java
@@ -53,7 +53,7 @@ public class AttackDetectionResource {
         this.realm = realm;
         this.adminEvent = adminEvent.realm(realm);
 
-        auth.init(RealmAuth.Resource.REALM);
+        auth.init(RealmAuth.Resource.USER);
     }
 
     /**