diff --git a/Security/Authorization/AuthorizationHelper.php b/Security/Authorization/AuthorizationHelper.php
index 51e2e196a..881a04af4 100644
--- a/Security/Authorization/AuthorizationHelper.php
+++ b/Security/Authorization/AuthorizationHelper.php
@@ -106,6 +106,9 @@ class AuthorizationHelper
                             // perform check on scope if necessary
                             if ($entity instanceof HasScopeInterface) {
                                 $scope = $entity->getScope();
+                                if ($scope === NULL) {
+                                    return true;
+                                }
                                 if ($scope->getId() === $roleScope
                                       ->getScope()->getId()) {
                                     return true;