diff --git a/python/ray/autoscaler/kubernetes/operator_configs/operator.yaml b/python/ray/autoscaler/kubernetes/operator_configs/operator.yaml
index 956f27ff7..2c170f072 100644
--- a/python/ray/autoscaler/kubernetes/operator_configs/operator.yaml
+++ b/python/ray/autoscaler/kubernetes/operator_configs/operator.yaml
@@ -10,8 +10,8 @@ metadata:
   name: ray-operator-role
 rules:
 - apiGroups: ["", "cluster.ray.io"]
-  resources: ["rayclusters", "pods", "pods/exec"]
-  verbs: ["get", "watch", "list", "create", "delete", "patch"]
+  resources: ["rayclusters", "rayclusters/finalizers", "pods", "pods/exec"]
+  verbs: ["get", "watch", "list", "create", "delete", "patch", "update"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding