diff --git a/templates/user-authz-cluster-roles.yaml b/templates/user-authz-cluster-roles.yaml
index 4ed0300901..6460800b4a 100644
--- a/templates/user-authz-cluster-roles.yaml
+++ b/templates/user-authz-cluster-roles.yaml
@@ -154,3 +154,22 @@ rules:
   - deletecollection
   - patch
   - update
+- apiGroups:
+  - internal.virtualization.deckhouse.io
+  resources:
+  - internalvirtualizationkubevirts
+  - internalvirtualizationvirtualmachines
+  - internalvirtualizationvirtualmachineinstances
+  - internalvirtualizationvirtualmachineinstancemigrations
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - cdi.internal.virtualization.deckhouse.io
+  resources:
+  - internalvirtualizationdatavolumes
+  verbs:
+  - get
+  - list
+  - watch