diff --git a/src/Entity/Controller/GroupListBuilder.php b/src/Entity/Controller/GroupListBuilder.php
index 130610d..107b017 100644
--- a/src/Entity/Controller/GroupListBuilder.php
+++ b/src/Entity/Controller/GroupListBuilder.php
@@ -158,7 +158,7 @@ class GroupListBuilder extends EntityListBuilder {
       $query->pager($this->limit);
     }
 
-    return $query->execute();
+    return $query->accessCheck()->execute();
   }
 
   /**
diff --git a/src/Entity/Controller/GroupRelationshipListBuilder.php b/src/Entity/Controller/GroupRelationshipListBuilder.php
index d0ce355..54ce4d7 100644
--- a/src/Entity/Controller/GroupRelationshipListBuilder.php
+++ b/src/Entity/Controller/GroupRelationshipListBuilder.php
@@ -86,7 +86,7 @@ class GroupRelationshipListBuilder extends EntityListBuilder {
       $query->pager($this->limit);
     }
 
-    return $query->execute();
+    return $query->accessCheck()->execute();
   }
 
   /**
diff --git a/src/Entity/Controller/GroupRoleListBuilder.php b/src/Entity/Controller/GroupRoleListBuilder.php
index babc731..99df94e 100644
--- a/src/Entity/Controller/GroupRoleListBuilder.php
+++ b/src/Entity/Controller/GroupRoleListBuilder.php
@@ -70,7 +70,7 @@ class GroupRoleListBuilder extends DraggableListBuilder {
       $query->pager($this->limit);
     }
 
-    return array_values($query->execute());
+    return array_values($query->accessCheck()->execute());
   }
 
   /**
diff --git a/src/Entity/Form/GroupRevisionDeleteForm.php b/src/Entity/Form/GroupRevisionDeleteForm.php
index 5714081..03008a9 100644
--- a/src/Entity/Form/GroupRevisionDeleteForm.php
+++ b/src/Entity/Form/GroupRevisionDeleteForm.php
@@ -138,6 +138,7 @@ class GroupRevisionDeleteForm extends ConfirmFormBase {
       ->getQuery()
       ->allRevisions()
       ->condition('id', $group->id())
+      ->accessCheck()
       ->count()
       ->execute();
   }
diff --git a/src/Entity/GroupType.php b/src/Entity/GroupType.php
index c22bd2a..64dc613 100644
--- a/src/Entity/GroupType.php
+++ b/src/Entity/GroupType.php
@@ -161,7 +161,7 @@ class GroupType extends ConfigEntityBundleBase implements GroupTypeInterface {
       $query->condition('scope', PermissionScopeInterface::INDIVIDUAL_ID);
     }
 
-    return $query->execute();
+    return $query->accessCheck()->execute();
   }
 
   /**
diff --git a/src/Entity/Storage/GroupRoleStorage.php b/src/Entity/Storage/GroupRoleStorage.php
index e70ccc5..f539262 100644
--- a/src/Entity/Storage/GroupRoleStorage.php
+++ b/src/Entity/Storage/GroupRoleStorage.php
@@ -121,7 +121,7 @@ class GroupRoleStorage extends ConfigEntityStorage implements GroupRoleStorageIn
         $query = $this->getQuery()
           ->condition('scope', $membership ? PermissionScopeInterface::INSIDER_ID : PermissionScopeInterface::OUTSIDER_ID)
           ->condition('global_role', $roles, 'IN');
-        $ids = array_merge($ids, $query->execute());
+        $ids = array_merge($ids, $query->accessCheck()->execute());
       }
 
       $this->userGroupRoleIds[$uid][$gid][$key] = $ids;
diff --git a/src/GroupMembershipLoader.php b/src/GroupMembershipLoader.php
index aa14832..5a7c73f 100644
--- a/src/GroupMembershipLoader.php
+++ b/src/GroupMembershipLoader.php
@@ -108,7 +108,7 @@ class GroupMembershipLoader implements GroupMembershipLoaderInterface {
       $query->condition('group_roles', (array) $roles, 'IN');
     }
 
-    $ids = $query->execute();
+    $ids = $query->accessCheck()->execute();
     if ($ids && $group_relationships = $this->groupRelationshipStorage()->loadMultiple($ids)) {
       return $this->wrapGroupRelationshipEntities($group_relationships);
     }
diff --git a/src/Plugin/Validation/Constraint/GroupRoleScopeValidator.php b/src/Plugin/Validation/Constraint/GroupRoleScopeValidator.php
index 0a406d5..fccec61 100644
--- a/src/Plugin/Validation/Constraint/GroupRoleScopeValidator.php
+++ b/src/Plugin/Validation/Constraint/GroupRoleScopeValidator.php
@@ -71,6 +71,7 @@ class GroupRoleScopeValidator extends ConstraintValidator implements ContainerIn
         ->condition('group_type', $group_role->getGroupTypeId())
         ->condition('scope', $scope)
         ->condition('global_role', $global_role)
+        ->accessCheck()
         ->execute();
 
       if (!empty($existing_pairs)) {
diff --git a/tests/src/Kernel/QueryAlter/EntityQueryAlterCacheabilityTest.php b/tests/src/Kernel/QueryAlter/EntityQueryAlterCacheabilityTest.php
index 2206c7f..bbb7b00 100644
--- a/tests/src/Kernel/QueryAlter/EntityQueryAlterCacheabilityTest.php
+++ b/tests/src/Kernel/QueryAlter/EntityQueryAlterCacheabilityTest.php
@@ -63,7 +63,7 @@ class EntityQueryAlterCacheabilityTest extends GroupKernelTestBase {
 
     $render_context = new RenderContext();
     $renderer->executeInRenderContext($render_context, static function () use ($storage) {
-      $storage->getQuery()->execute();
+      $storage->getQuery()->accessCheck()->execute();
     });
     $this->assertTrue($render_context->isEmpty(), 'Empty cacheability was not bubbled.');
 
@@ -85,7 +85,7 @@ class EntityQueryAlterCacheabilityTest extends GroupKernelTestBase {
 
     $render_context = new RenderContext();
     $renderer->executeInRenderContext($render_context, static function () use ($storage) {
-      $storage->getQuery()->execute();
+      $storage->getQuery()->accessCheck()->execute();
     });
     $this->assertFalse($render_context->isEmpty(), 'Cacheability was bubbled');
     $this->assertCount(1, $render_context);
diff --git a/tests/src/Kernel/RevisionUiAccessTest.php b/tests/src/Kernel/RevisionUiAccessTest.php
index 4154045..e391a9e 100644
--- a/tests/src/Kernel/RevisionUiAccessTest.php
+++ b/tests/src/Kernel/RevisionUiAccessTest.php
@@ -818,6 +818,7 @@ class RevisionUiAccessTest extends GroupKernelTestBase {
       ->condition('id', $group->id())
       ->condition('default_langcode', 1)
       ->count()
+      ->accessCheck()
       ->execute();
   }