diff --git a/app/abilities/provider.js b/app/abilities/provider.js
index d986fda9..945f8f0a 100644
--- a/app/abilities/provider.js
+++ b/app/abilities/provider.js
@@ -14,7 +14,10 @@ export default class Provider extends Ability {
       case 'staff_admin':
         return true;
       case 'consortium_admin':
-        return true;
+        return (
+          this.get('currentUser.provider_id') ===
+          this.get('model.consortium.id')
+        );
       default:
         return false;
     }
@@ -25,6 +28,11 @@ export default class Provider extends Ability {
     switch (this.get('currentUser.role_id')) {
       case 'staff_admin':
         return true;
+      case 'consortium_admin':
+        return (
+          this.get('currentUser.provider_id') ===
+          this.get('model.consortium.id')
+        );
       default:
         return false;
     }