diff --git a/templates/controller/rbac-for-us.yaml b/templates/controller/rbac-for-us.yaml
index 4ae07ec..21a157e 100644
--- a/templates/controller/rbac-for-us.yaml
+++ b/templates/controller/rbac-for-us.yaml
@@ -82,12 +82,13 @@ rules:
       - watch
       - update
   - apiGroups:
-      - deckhouse.io
+      - ""
     resources:
       - moduleconfigs
     verbs:
       - list
       - get
+      - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding