diff --git a/ipaserver/install/plugins/update_managed_permissions.py b/ipaserver/install/plugins/update_managed_permissions.py
index 2ca054d50..7394e6282 100644
--- a/ipaserver/install/plugins/update_managed_permissions.py
+++ b/ipaserver/install/plugins/update_managed_permissions.py
@@ -345,6 +345,7 @@ class update_managed_permissions(PostUpdate):
         if 'replaces' in template:
             sub_dict = {
                 'SUFFIX': str(self.api.env.basedn),
+                'REALM': str(self.api.env.realm),
             }
             legacy_acistrs = [ipautil.template_str(r, sub_dict)
                               for r in template['replaces']]