diff --git a/docs/oms_beta_bootstrap-gcp.md b/docs/oms_beta_bootstrap-gcp.md
index b19a359f..fd6e88e7 100644
--- a/docs/oms_beta_bootstrap-gcp.md
+++ b/docs/oms_beta_bootstrap-gcp.md
@@ -66,7 +66,7 @@ oms beta bootstrap-gcp [flags]
       --openbao-uri string                        URI for OpenBao (optional)
       --openbao-user string                       OpenBao username (optional) (default "admin")
       --preemptible                               Use preemptible VMs for Codesphere infrastructure. Mutually exclusive with --spot-vms (default: false)
-      --preview-flags stringArray                 Preview flags to enable in Codesphere installation (optional) (default [secret-management,sub-path-mount,workspace-ssh])
+      --preview-flags stringArray                 Preview flags to enable in Codesphere installation (optional) (default [openfga-authz,cluster-admin,secret-management,sub-path-mount,workspace-ssh])
       --project-name string                       Unique GCP Project Name (required)
       --project-ttl string                        Time to live for the GCP project. Cleanup workflows will remove it afterwards. (default: 2 hours) (default "2h")
       --prometheus-remote-write-password string   Prometheus remote write password stored in the generated vault (optional)
diff --git a/docs/oms_beta_bootstrap-local.md b/docs/oms_beta_bootstrap-local.md
index 7c4057c6..4a78c9a0 100644
--- a/docs/oms_beta_bootstrap-local.md
+++ b/docs/oms_beta_bootstrap-local.md
@@ -28,7 +28,7 @@ oms beta bootstrap-local [flags]
       --internal-flags stringArray   Internal flags to enable in Codesphere installation (optional) (default [headless-services,vcluster,custom-service-image,ms-in-ls])
       --k0s                          Use k0s-specific configuration (required to deploy to k0s clusters)
       --pod-cidr string              Service CIDR of the Kubernetes cluster. If not specified, OMS will try to determine it.
-      --preview-flags stringArray    Preview flags to enable in Codesphere installation (optional) (default [secret-management,sub-path-mount,workspace-ssh])
+      --preview-flags stringArray    Preview flags to enable in Codesphere installation (optional) (default [openfga-authz,cluster-admin,secret-management,sub-path-mount,workspace-ssh])
       --profile string               Profile to apply to the install config like resources (supported: dev, minimal, prod) (default "dev")
       --registry-url string          OCI registry URL used for the ArgoCD helm pull secret (only relevant with --argocd) (default "oci://ghcr.io/codesphere-cloud/charts")
       --registry-user string         Custom Registry username
diff --git a/internal/bootstrap/gcp/gcp.go b/internal/bootstrap/gcp/gcp.go
index 19eb5c30..79ad65a4 100644
--- a/internal/bootstrap/gcp/gcp.go
+++ b/internal/bootstrap/gcp/gcp.go
@@ -76,6 +76,8 @@ var DefaultInternalFlags []string = []string{
 }
 
 var DefaultPreviewFlags []string = []string{
+	"openfga-authz",
+	"cluster-admin",
 	"secret-management",
 	"sub-path-mount",
 	"workspace-ssh",