diff --git a/charts/kagenti-operator/templates/rbac/role.yaml b/charts/kagenti-operator/templates/rbac/role.yaml
index d04f23d..501a605 100755
--- a/charts/kagenti-operator/templates/rbac/role.yaml
+++ b/charts/kagenti-operator/templates/rbac/role.yaml
@@ -9,21 +9,10 @@ rules:
   - ""
   resources:
   - configmaps
-  - endpoints
-  - namespaces
-  - persistentvolumeclaims
-  - pods
-  - pods/log
-  - secrets
-  - serviceaccounts
   - services
   verbs:
-  - create
-  - delete
   - get
   - list
-  - patch
-  - update
   - watch
 - apiGroups:
   - ""
@@ -32,39 +21,21 @@ rules:
   verbs:
   - create
   - patch
-  - update
 - apiGroups:
-  - admissionregistration.k8s.io
-  resources:
-  - mutatingwebhookconfigurations
-  - validatingwebhookconfigurations
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - apiextensions.k8s.io
+  - ""
   resources:
-  - customresourcedefinitions
+  - pods
   verbs:
-  - create
-  - delete
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
-  - apps
+  - agent.kagenti.dev
   resources:
-  - daemonsets
-  - deployments
-  - replicasets
-  - statefulsets
+  - agentcards
+  - agentruntimes
   verbs:
   - create
   - delete
@@ -74,56 +45,35 @@ rules:
   - update
   - watch
 - apiGroups:
-  - apps
+  - agent.kagenti.dev
   resources:
-  - deployments/finalizers
-  - statefulsets/finalizers
+  - agentcards/finalizers
+  - agentruntimes/finalizers
   verbs:
   - update
 - apiGroups:
-  - extensions
+  - agent.kagenti.dev
   resources:
-  - daemonsets
-  - deployments
-  - replicasets
+  - agentcards/status
+  - agentruntimes/status
   verbs:
-  - create
-  - delete
   - get
-  - list
   - patch
   - update
-  - watch
 - apiGroups:
-  - agent.kagenti.dev
+  - apps
   resources:
-  - agentcards
+  - deployments
+  - statefulsets
   verbs:
-  - create
-  - delete
   - get
   - list
   - patch
   - update
   - watch
-- apiGroups:
-  - agent.kagenti.dev
-  resources:
-  - agentcards/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - agent.kagenti.dev
-  resources:
-  - agentcards/status
-  verbs:
-  - get
-  - patch
-  - update
 - apiGroups:
   - networking.k8s.io
   resources:
-  - ingresses
   - networkpolicies
   verbs:
   - create
@@ -140,20 +90,5 @@ rules:
   verbs:
   - get
   - list
-  - watch
-  - patch
-- apiGroups:
-  - rbac.authorization.k8s.io
-  resources:
-  - clusterrolebindings
-  - clusterroles
-  - rolebindings
-  - roles
-  verbs:
-  - create
-  - delete
-  - get
-  - list
   - patch
-  - update
   - watch