diff --git a/templates/provider/hmc/templates/rbac/controller/roles.yaml b/templates/provider/hmc/templates/rbac/controller/roles.yaml
index 22876c277..f5f30d8ad 100644
--- a/templates/provider/hmc/templates/rbac/controller/roles.yaml
+++ b/templates/provider/hmc/templates/rbac/controller/roles.yaml
@@ -69,6 +69,7 @@ rules:
   - get
   - list
   - watch
+  - update # labels
 - apiGroups:
   - hmc.mirantis.com
   resources: