diff --git a/modules/user_access/main.tf b/modules/user_access/main.tf
index acdd5e9..108571b 100644
--- a/modules/user_access/main.tf
+++ b/modules/user_access/main.tf
@@ -79,7 +79,7 @@ data "aws_iam_policy_document" "access_assumerole_root_policy" {
 
     principals {
       type        = "AWS"
-      identifiers = var.assumerole_account_ids == [] ? [local.account_id] : var.assumerole_account_ids
+      identifiers = length(var.assumerole_account_ids) == 0 ? [local.account_id] : var.assumerole_account_ids
     }
   }
 }