diff --git a/apps/garm/rbac.yaml b/apps/garm/rbac.yaml
index fc93ab8..2a37b2b 100644
--- a/apps/garm/rbac.yaml
+++ b/apps/garm/rbac.yaml
@@ -27,3 +27,25 @@ roleRef:
   kind: Role
   name: garm-provider-k8s
   apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: garm-namespace-manager
+rules:
+  - apiGroups: [""]
+    resources: ["namespaces"]
+    verbs: ["get"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: garm-namespace-manager
+subjects:
+  - kind: ServiceAccount
+    name: garm
+    namespace: garm
+roleRef:
+  kind: ClusterRole
+  name: garm-namespace-manager
+  apiGroup: rbac.authorization.k8s.io