diff --git a/kube/deploy/core/system-upgrade-controller/plans/talos/app/rbac.yaml b/kube/deploy/core/system-upgrade-controller/plans/talos/app/rbac.yaml
index 6b367e29..53048234 100644
--- a/kube/deploy/core/system-upgrade-controller/plans/talos/app/rbac.yaml
+++ b/kube/deploy/core/system-upgrade-controller/plans/talos/app/rbac.yaml
@@ -5,4 +5,4 @@ metadata:
   name: talos
 spec:
   roles:
-    - os:operator
+    - os:admin