diff --git a/config/02-sa.yaml b/config/02-sa.yaml
index aaeabf2..9bd3c37 100644
--- a/config/02-sa.yaml
+++ b/config/02-sa.yaml
@@ -13,6 +13,10 @@ rules:
 - apiGroups: [""]
   resources: ["secrets"]
   verbs: ["get"]
+- apiGroups: ["policy"]
+  resources: ["podsecuritypolicies"]
+  resourceNames: ["webhook-interseptor"]
+  verbs: ["use"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding