diff --git a/config/permissions.php b/config/permissions.php
index 3b64d09..930b853 100644
--- a/config/permissions.php
+++ b/config/permissions.php
@@ -120,6 +120,13 @@
         'controller' => 'Pages',
         'action' => 'display',
     ],
+    [
+        'role' => '*',
+        'plugin' => 'DebugKit',
+        'controller' => '*',
+        'action' => '*',
+        'bypassAuth' => true,
+    ],
 ];
 
 $preload = \Cake\Core\Configure::read('CakeDC/Auth.preloadPermissions', []);
diff --git a/src/Rbac/Permissions/AbstractProvider.php b/src/Rbac/Permissions/AbstractProvider.php
index 0ab875c..60a52d8 100644
--- a/src/Rbac/Permissions/AbstractProvider.php
+++ b/src/Rbac/Permissions/AbstractProvider.php
@@ -114,6 +114,13 @@ public function __construct(array $config = [])
                 'controller' => 'Pages',
                 'action' => 'display',
             ],
+            [
+                'role' => '*',
+                'plugin' => 'DebugKit',
+                'controller' => '*',
+                'action' => '*',
+                'bypassAuth' => true,
+            ],
         ];
     }
 
diff --git a/tests/TestCase/Rbac/RbacTest.php b/tests/TestCase/Rbac/RbacTest.php
index 89317df..27338da 100644
--- a/tests/TestCase/Rbac/RbacTest.php
+++ b/tests/TestCase/Rbac/RbacTest.php
@@ -105,6 +105,13 @@ public function setUp(): void
                 'controller' => 'Pages',
                 'action' => 'display',
             ],
+            [
+                'role' => '*',
+                'plugin' => 'DebugKit',
+                'controller' => '*',
+                'action' => '*',
+                'bypassAuth' => true,
+            ],
         ];
         $this->rbac = new Rbac($this->defaultPermissions);
     }