diff --git a/debian/univention-bareos.install.in b/debian/univention-bareos.install.in
index e6940d8c857..d31eb6f9a20 100644
--- a/debian/univention-bareos.install.in
+++ b/debian/univention-bareos.install.in
@@ -10,6 +10,7 @@
 /etc/univention/templates/scripts/etc/bareos/bareos-dir.d/pool/Differential.conf
 /etc/univention/templates/scripts/etc/bareos/bareos-dir.d/pool/Full.conf
 /etc/univention/templates/scripts/etc/bareos/bareos-dir.d/pool/Incremental.conf
+/etc/univention/templates/scripts/etc/bareos/bareos-dir.d/webui-profiles.conf
 /usr/lib/univention-directory-listener/system/univention-bareos.py
 /usr/lib/univention-install/62univention-bareos.inst
 /usr/lib/univention-uninstall/63univention-bareos.uinst
diff --git a/debian/univention-bareos.univention-config-registry b/debian/univention-bareos.univention-config-registry
index bcc37739539..cef66d78dd7 100644
--- a/debian/univention-bareos.univention-config-registry
+++ b/debian/univention-bareos.univention-config-registry
@@ -31,6 +31,9 @@ File: etc/bareos/bareos-dir.d/pool/Incremental.conf
 Variables: bareos/max_incr_volume_bytes
 Variables: bareos/max_incr_volumes
 
+Type: file
+File: etc/bareos/bareos-dir.d/webui-profiles.conf
+
 Type: file
 File: etc/bareos/bareos-sd.d/device/FileStorage.conf
 Variables: bareos/filestorage
diff --git a/platforms/univention/conffiles/etc/bareos/bareos-dir.d/webui-profiles.conf b/platforms/univention/conffiles/etc/bareos/bareos-dir.d/webui-profiles.conf
new file mode 100644
index 00000000000..f528a827f72
--- /dev/null
+++ b/platforms/univention/conffiles/etc/bareos/bareos-dir.d/webui-profiles.conf
@@ -0,0 +1,21 @@
+@%@UCRWARNING=# @%@
+
+#
+# bareos-webui profile resource.
+# Deprecated, only used when updating from bareos-15.2.
+# Fresh installation of bareos >= 16.2 will use
+# /etc/bareos/bareos-dir.d/profile/webui-admin.conf (profile name: webui-admin).
+#
+Profile {
+  Name = webui
+  CommandACL = !.bvfs_clear_cache, !.exit, !.sql, !configure, !create, !delete, !purge, !prune, !sqlquery, !umount, !unmount, *all*
+  Job ACL = *all*
+  Schedule ACL = *all*
+  Catalog ACL = *all*
+  Pool ACL = *all*
+  Storage ACL = *all*
+  Client ACL = *all*
+  FileSet ACL = *all*
+  Where ACL = *all*
+}
+