diff --git a/modules/inception/gcp/platform-roles.tf b/modules/inception/gcp/platform-roles.tf
index 049edabb..d51f8677 100644
--- a/modules/inception/gcp/platform-roles.tf
+++ b/modules/inception/gcp/platform-roles.tf
@@ -76,6 +76,7 @@ resource "google_project_iam_custom_role" "platform_make" {
     "apikeys.keys.update",
     "datamigration.connectionprofiles.create",
     "datamigration.connectionprofiles.delete",
+    "datamigration.connectionprofiles.get",
   ]
 }
 
diff --git a/modules/postgresql/gcp/read-replica.tf b/modules/postgresql/gcp/read-replica.tf
index f2ae5b10..6d4f8a2f 100644
--- a/modules/postgresql/gcp/read-replica.tf
+++ b/modules/postgresql/gcp/read-replica.tf
@@ -12,6 +12,17 @@ resource "google_sql_database_instance" "replica" {
     tier              = local.tier
     availability_type = local.highly_available ? "REGIONAL" : "ZONAL"
 
+    dynamic "database_flags" {
+      for_each = local.upgradable ? [{
+        name  = "cloudsql.enable_pglogical"
+        value = "on"
+      }] : []
+      content {
+        name  = database_flags.value.name
+        value = database_flags.value.value
+      }
+    }
+
     dynamic "database_flags" {
       for_each = local.max_connections > 0 ? [local.max_connections] : []
       content {