diff --git a/dtp-webapp-cli.js b/dtp-webapp-cli.js
index c7dbf25..99983a4 100644
--- a/dtp-webapp-cli.js
+++ b/dtp-webapp-cli.js
@@ -34,6 +34,10 @@ module.grantPermission = async (target, permission) => {
   const User = mongoose.model('User');
   try {
     const user = await User.findOne({ email: target }).select('+permissions +flags');
+    if (!user) {
+      throw new Error(`User not found (email: ${target})`);
+    }
+
     switch (permission) {
       case 'admin':
         user.flags.isAdmin = true;