diff --git a/command/setup_consul.go b/command/setup_consul.go
index b703d092c..087f26337 100644
--- a/command/setup_consul.go
+++ b/command/setup_consul.go
@@ -440,7 +440,7 @@ func (s *SetupConsulCommand) renderAuthMethod(name string, desc string) (*api.AC
 	}
 	if s.consulEnt {
 		method.NamespaceRules = []*api.ACLAuthMethodNamespaceRule{{
-			Selector:      "",
+			Selector:      `"consul_namespace" in value`,
 			BindNamespace: "${value.consul_namespace}",
 		}}
 	}