diff --git a/deploy/hub/hub_controller_clusterrole.yaml b/deploy/hub/hub_controller_clusterrole.yaml
index 4ef35f418..0b8900a15 100644
--- a/deploy/hub/hub_controller_clusterrole.yaml
+++ b/deploy/hub/hub_controller_clusterrole.yaml
@@ -50,3 +50,10 @@ rules:
 - apiGroups: ["cluster.open-cluster-management.io"]
   resources: ["managedclustersets/status"]
   verbs: ["update", "patch"]
+  # Allow to access metrics API
+- apiGroups: ["authentication.k8s.io"]
+  resources: ["tokenreviews"]
+  verbs: ["create"]
+- apiGroups: ["authorization.k8s.io"]
+  resources: ["subjectaccessreviews"]
+  verbs: ["create"]