diff --git a/coderd/rbac/object.go b/coderd/rbac/object.go
index 476673a980..a3f4b5d740 100644
--- a/coderd/rbac/object.go
+++ b/coderd/rbac/object.go
@@ -3,6 +3,7 @@ package rbac
 import (
 	"fmt"
 	"strings"
+	"sync/atomic"
 
 	"github.com/google/uuid"
 	"golang.org/x/xerrors"
@@ -239,16 +240,16 @@ func (z Object) WithGroupACL(groups map[string][]policy.Action) Object {
 
 // TODO(geokat): similar to builtInRoles, this should ideally be
 // scoped to a coderd rather than a global.
-var workspaceACLDisabled bool
+var workspaceACLDisabled atomic.Bool
 
 // SetWorkspaceACLDisabled disables/enables workspace sharing for the
 // deployment.
 func SetWorkspaceACLDisabled(v bool) {
-	workspaceACLDisabled = v
+	workspaceACLDisabled.Store(v)
 }
 
 // WorkspaceACLDisabled returns true if workspace sharing is disabled
 // for the deployment.
 func WorkspaceACLDisabled() bool {
-	return workspaceACLDisabled
+	return workspaceACLDisabled.Load()
 }