diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index c0f217569..38516dd40 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -17,6 +17,10 @@ Unreleased
 ----------
 * nothing unreleased
 
+[4.21.3]
+---------
+* chore: rename PAs django group name
+
 [4.21.2]
 ---------
 * feat: Updated EnterpriseCustomerSerializer to include additional fields
diff --git a/enterprise/__init__.py b/enterprise/__init__.py
index 39f32807d..1372b2125 100644
--- a/enterprise/__init__.py
+++ b/enterprise/__init__.py
@@ -2,4 +2,4 @@
 Your project description goes here.
 """
 
-__version__ = "4.21.2"
+__version__ = "4.21.3"
diff --git a/enterprise/api/v1/permissions.py b/enterprise/api/v1/permissions.py
index 74ee12a07..011c0bee2 100644
--- a/enterprise/api/v1/permissions.py
+++ b/enterprise/api/v1/permissions.py
@@ -24,7 +24,7 @@ class IsInProvisioningAdminGroup(permissions.BasePermission):
     """
     Grant access to those users only who are part of the license provisiioning django group
     """
-    ALLOWED_API_GROUPS = ['provisioning-admins-group']
+    ALLOWED_API_GROUPS = ['provisioning_admins_group']
     message = 'Access denied: You do not have the necessary permissions to access this.'
 
     def has_permission(self, request, view):
diff --git a/enterprise/api/v1/views/enterprise_customer.py b/enterprise/api/v1/views/enterprise_customer.py
index 866583687..8b1bb6653 100644
--- a/enterprise/api/v1/views/enterprise_customer.py
+++ b/enterprise/api/v1/views/enterprise_customer.py
@@ -57,7 +57,7 @@ class EnterpriseCustomerViewSet(EnterpriseReadWriteModelViewSet):
     filter_backends = EnterpriseReadWriteModelViewSet.filter_backends + (EnterpriseLinkedUserFilterBackend,)
     pagination_class = PaginationWithFeatureFlags
 
-    PROVISIONING_ADMINS_GROUP = 'provisioning-admins-group'
+    PROVISIONING_ADMINS_GROUP = 'provisioning_admins_group'
     USER_ID_FILTER = 'enterprise_customer_users__user_id'
     FIELDS = (
         'uuid', 'slug', 'name', 'active', 'site', 'enable_data_sharing_consent',
diff --git a/tests/test_enterprise/api/constants.py b/tests/test_enterprise/api/constants.py
index 6213f0cba..294f8a038 100644
--- a/tests/test_enterprise/api/constants.py
+++ b/tests/test_enterprise/api/constants.py
@@ -12,4 +12,4 @@
     ('<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"><EntityDescriptor entityID="https://example.com"></EntityDescriptor></EntitiesDescriptor>', "https://example.com")  # pylint: disable=line-too-long
 ]
 
-PROVISIONING_ADMINS_GROUP = "provisioning-admins-group"
+PROVISIONING_ADMINS_GROUP = "provisioning_admins_group"