diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 324636a..290f407 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -47,6 +47,8 @@ rules:
   verbs:
   - get
   - list
+  - patch
+  - update
   - watch
 - apiGroups:
   - managedupgrade.appuio.io
diff --git a/controllers/upgrading_metrics.go b/controllers/upgrading_metrics.go
index ce520e4..b927f0e 100644
--- a/controllers/upgrading_metrics.go
+++ b/controllers/upgrading_metrics.go
@@ -22,7 +22,7 @@ import (
 )
 
 //+kubebuilder:rbac:groups=config.openshift.io,resources=clusterversions,verbs=get;list;watch;update;patch
-//+kubebuilder:rbac:groups=machineconfiguration.openshift.io,resources=machineconfigpools,verbs=get;list;watch
+//+kubebuilder:rbac:groups=machineconfiguration.openshift.io,resources=machineconfigpools,verbs=get;list;watch;update;patch
 
 var clusterUpgradingDesc = prometheus.NewDesc(
 	MetricsNamespace+"_cluster_upgrading",