diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 879d6bc8..598b4daf 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -168,6 +168,16 @@ rules:
   - patch
   - update
   - watch
+- apiGroups:
+  - kueue.x-k8s.io
+  resources:
+  - clusterqueues
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
 - apiGroups:
   - kueue.x-k8s.io
   resources:
diff --git a/pkg/controllers/appwrapper_controller.go b/pkg/controllers/appwrapper_controller.go
index f15a4ef2..c58516da 100644
--- a/pkg/controllers/appwrapper_controller.go
+++ b/pkg/controllers/appwrapper_controller.go
@@ -42,5 +42,6 @@ package controllers
 // +kubebuilder:rbac:groups=kueue.x-k8s.io,resources=resourceflavors,verbs=get;list;watch
 // +kubebuilder:rbac:groups=kueue.x-k8s.io,resources=workloadpriorityclasses,verbs=get;list;watch
 
-// permission to watch nodes for Autopilot integration
+// permission to watch nodes and edit clusterqueues for Autopilot integration
 //+kubebuilder:rbac:groups="",resources=nodes,verbs=get;list;watch
+//+kubebuilder:rbac:groups=kueue.x-k8s.io,resources=clusterqueues,verbs=get;list;watch;update;patch