diff --git a/src/EventSubscriber/UwWebformEventSubscriber.php b/src/EventSubscriber/UwWebformEventSubscriber.php
new file mode 100644
index 0000000000000000000000000000000000000000..d2486723e6fbaea45fbcb54ad1b73e6e68d77d8f
--- /dev/null
+++ b/src/EventSubscriber/UwWebformEventSubscriber.php
@@ -0,0 +1,53 @@
+<?php
+
+namespace Drupal\uw_cfg_common\EventSubscriber;
+
+use Drupal\core_event_dispatcher\EntityHookEvents;
+use Drupal\core_event_dispatcher\Event\Entity\EntityPresaveEvent;
+use Drupal\webform\WebformInterface;
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+
+/**
+ * Fixes roles permission for submission create for webforms.
+ */
+class UwWebformEventSubscriber implements EventSubscriberInterface {
+
+  /**
+   * {@inheritDoc}
+   */
+  public static function getSubscribedEvents(): array {
+    return [
+      EntityHookEvents::ENTITY_PRE_SAVE => 'preSave',
+    ];
+  }
+
+  /**
+   * Entity pre save dispatched event.
+   *
+   * @param \Drupal\core_event_dispatcher\Event\Entity\EntityPresaveEvent $event
+   *   Event object.
+   */
+  public function preSave(EntityPresaveEvent $event): void {
+    $entity = $event->getEntity();
+
+    if ($entity->bundle() === 'webform') {
+      /** @var \Drupal\webform\Entity\Webform $entity */
+      $access_rules = $entity->getAccessRules();
+
+      // Update webform submission access roles to be anonymous and
+      // authenticated. This will be done on EVERY webform save.
+      // Fixes migration issue with webforms. Once migration is updated and
+      // fixed, this code is no longer needed and can be removed.
+      $access_rules['create']['roles'] = [
+        'anonymous',
+        'authenticated',
+      ];
+
+      $entity->setAccessRules($access_rules);
+
+      // Setting default access denied handler.
+      $entity->setSetting('form_access_denied', WebformInterface::ACCESS_DENIED_PAGE);
+    }
+  }
+
+}
diff --git a/uw_cfg_common.services.yml b/uw_cfg_common.services.yml
index 28b61b8481a2f13712ad66e001f919d78e633167..f3b10415e299d7ce7c4c8d436192c021b147bdd9 100644
--- a/uw_cfg_common.services.yml
+++ b/uw_cfg_common.services.yml
@@ -45,3 +45,7 @@ services:
   uw_cfg_common.missing_blocks:
     class: Drupal\uw_cfg_common\Service\UWMissingBlocks
     arguments: ['@entity_type.manager', '@keyvalue.expirable', '@layout_builder.tempstore_repository']
+  uw_cfg_common.webform.event_subscriber:
+    class: '\Drupal\uw_cfg_common\EventSubscriber\UwWebformEventSubscriber'
+    tags:
+      - { name: 'event_subscriber' }