diff --git a/pkg/roles/roles.go b/pkg/roles/roles.go
index 32bee00a0..c8f6ac056 100644
--- a/pkg/roles/roles.go
+++ b/pkg/roles/roles.go
@@ -130,6 +130,7 @@ var (
 					"images/push",
 					"images/pull",
 					"containerreplicas/exec",
+					"containerreplicas/portforward",
 					"secrets/reveal",
 				},
 			},