diff --git a/pkg/registry/apis/iam/hooks.go b/pkg/registry/apis/iam/hooks.go
index 6cb0ba016df..46b522ed57e 100644
--- a/pkg/registry/apis/iam/hooks.go
+++ b/pkg/registry/apis/iam/hooks.go
@@ -758,12 +758,12 @@ func (b *IdentityAccessManagementAPIBuilder) BeginRoleUpdate(ctx context.Context
 
 		// Grab a ticket to write to Zanzana
 		wait := time.Now()
-		b.zTickets <- true
+		<-b.zTickets
 		hooksWaitHistogram.WithLabelValues(roleType, "update").Observe(time.Since(wait).Seconds()) // Record wait time
 
 		go func() {
 			defer func() {
-				<-b.zTickets
+				b.zTickets <- true
 			}()
 
 			b.logger.Debug("updating role permissions in zanzana",