diff --git a/plugins/permission-common/src/PermissionClient.ts b/plugins/permission-common/src/PermissionClient.ts
index 830c5c6b32..7fdb1c239f 100644
--- a/plugins/permission-common/src/PermissionClient.ts
+++ b/plugins/permission-common/src/PermissionClient.ts
@@ -213,16 +213,16 @@ export class PermissionClient implements PermissionEvaluator {
           resourceRefs: [],
           id: uuid.v4(),
         };
+
+        if (resourceRef) {
+          request[permission.name].resourceRefs?.push(resourceRef);
+        }
       } else {
         request[permission.name] ||= {
           permission,
           id: uuid.v4(),
         };
       }
-
-      if (resourceRef) {
-        request[permission.name].resourceRefs?.push(resourceRef);
-      }
     }
 
     const parsedResponse = await this.makeRawRequest(