diff --git a/ansible/files/prosody.cfg.lua b/ansible/files/prosody.cfg.lua
index 78d0054..5dbb4c2 100644
--- a/ansible/files/prosody.cfg.lua
+++ b/ansible/files/prosody.cfg.lua
@@ -267,6 +267,9 @@ Component ("groups."..DOMAIN) "muc"
 	restrict_room_creation = "local"
 	muc_local_only = { "general@groups."..DOMAIN }
 
+	authorization = "delegate"
+	authz_delegate_to = DOMAIN
+
 	-- Default configuration for rooms (typically overwritten by the client)
 	muc_room_default_allow_member_invites = true
 	muc_room_default_persistent = true
diff --git a/ansible/snikket.yml b/ansible/snikket.yml
index e10e71c..e2c2c3a 100644
--- a/ansible/snikket.yml
+++ b/ansible/snikket.yml
@@ -9,7 +9,7 @@
       package: "prosody-trunk"
       snapshot: "2023-03-31"
     prosody_modules:
-      revision: "5178c13deb78"
+      revision: "98d5acb93439"
   tasks:
     - import_tasks: tasks/prosody.yml
     - import_tasks: tasks/supervisor.yml
diff --git a/ansible/tasks/prosody.yml b/ansible/tasks/prosody.yml
index acb30a0..816e453 100644
--- a/ansible/tasks/prosody.yml
+++ b/ansible/tasks/prosody.yml
@@ -115,6 +115,7 @@
     - mod_measure_malloc
     - mod_http_xep227
     - mod_portcheck
+    - mod_authz_delegate
 
 - name: Enable wanted modules (snikket-modules)
   file: