diff --git a/api/dashboard/organisation/organisation_views.py b/api/dashboard/organisation/organisation_views.py
index 6b402de1..58098c08 100644
--- a/api/dashboard/organisation/organisation_views.py
+++ b/api/dashboard/organisation/organisation_views.py
@@ -432,6 +432,9 @@ def get(self, request, org_code):
 
 
 class OrganizationMergerView(APIView):
+    permission_classes = [CustomizePermission]
+
+    @role_required([RoleType.ADMIN.value])
     def patch(self, request, organisation_id):
         try:
             destination = Organization.objects.get(pk=organisation_id)