diff --git a/apps/rbac/const.py b/apps/rbac/const.py
index 04bfb1617..01c8bd915 100644
--- a/apps/rbac/const.py
+++ b/apps/rbac/const.py
@@ -119,8 +119,6 @@ exclude_permissions = (
     ('terminal', 'sessionsharing', 'view,add,change,delete', 'sessionsharing'),
     ('terminal', 'session', 'delete,share', 'session'),
     ('terminal', 'session', 'delete,change', 'command'),
-    ('terminal', 'appletpublication', '*', '*'),
-    ('terminal', 'applethostdeployment', '*', '*'),
     ('applications', '*', '*', '*'),
 )
 
@@ -152,6 +150,8 @@ only_system_permissions = (
     ('orgs', 'organization', 'view', 'rootorg'),
     ('terminal', 'applet', '*', '*'),
     ('terminal', 'applethost', '*', '*'),
+    ('terminal', 'appletpublication', '*', '*'),
+    ('terminal', 'applethostdeployment', '*', '*'),
     ('acls', 'loginacl', '*', '*'),
     ('acls', 'connectmethodacl', '*', '*')
 )
diff --git a/apps/rbac/tree.py b/apps/rbac/tree.py
index d608a869f..ef1571a1f 100644
--- a/apps/rbac/tree.py
+++ b/apps/rbac/tree.py
@@ -75,6 +75,8 @@ special_pid_mapper = {
     'xpack.strategyrule': 'cloud_import',
     'terminal.applet': 'remote_application',
     'terminal.applethost': 'remote_application',
+    'terminal.appletpublication': 'remote_application',
+    'terminal.applethostdeployment': 'remote_application',
     'accounts.accountbackupautomation': "backup_account_node",
     'accounts.accountbackupexecution': "backup_account_node",
     "accounts.pushaccountautomation": "push_account_node",