diff --git a/src/c3nav/control/migrations/0002_userpermissions_access_all.py b/src/c3nav/control/migrations/0002_userpermissions_access_all.py
new file mode 100644
index 00000000..ee3b540a
--- /dev/null
+++ b/src/c3nav/control/migrations/0002_userpermissions_access_all.py
@@ -0,0 +1,20 @@
+# -*- coding: utf-8 -*-
+# Generated by Django 1.11.7 on 2017-12-08 15:51
+from __future__ import unicode_literals
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('control', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='userpermissions',
+            name='access_all',
+            field=models.BooleanField(default=False, verbose_name='can access and grant access to everything'),
+        ),
+    ]
diff --git a/src/c3nav/control/models.py b/src/c3nav/control/models.py
index 46b02a2b..c5dd89d8 100644
--- a/src/c3nav/control/models.py
+++ b/src/c3nav/control/models.py
@@ -15,6 +15,7 @@ class UserPermissions(models.Model):
     control_panel = models.BooleanField(default=False, verbose_name=_('can access control panel'))
     grant_permissions = models.BooleanField(default=False, verbose_name=_('can grant control permissions'))
     manage_announcements = models.BooleanField(default=False, verbose_name=_('manage announcements'))
+    access_all = models.BooleanField(default=False, verbose_name=_('can access and grant access to everything'))
 
     class Meta:
         verbose_name = _('User Permissions')