diff --git a/packages/core/upload/server/controllers/admin-api.js b/packages/core/upload/server/controllers/admin-api.js
index db90b74613..03c69df1f9 100644
--- a/packages/core/upload/server/controllers/admin-api.js
+++ b/packages/core/upload/server/controllers/admin-api.js
@@ -194,10 +194,8 @@ const findEntityAndCheckPermissions = async (ability, action, model, id) => {
 
   const pm = strapi.admin.services.permission.createPermissionsManager({ ability, action, model });
 
-  const author = await strapi.admin.services.user.findOne(
-    _.get(file, [CREATED_BY_ATTRIBUTE, 'id'], ''),
-    ['roles']
-  );
+  const creatorId = _.get(file, [CREATED_BY_ATTRIBUTE, 'id']);
+  const author = creatorId ? await strapi.admin.services.user.findOne(creatorId, ['roles']) : null;
 
   const fileWithRoles = _.set(_.cloneDeep(file), 'createdBy', author);