diff --git a/lib/api/members.rb b/lib/api/members.rb
index 1f3eeb73d62617a51efcad78211dfb5cf20f9e45..b54991de1723096aeac6beac9c6ff400e1cd64b7 100644
--- a/lib/api/members.rb
+++ b/lib/api/members.rb
@@ -121,6 +121,7 @@ class Members < ::API::Base
 
         post ":id/members", feature_category: feature_category do
           source = find_source(source_type, params[:id])
+          authorize_admin_source_member!(source_type, source)
 
           create_service_params = params.merge(source: source)