diff --git a/manifests/cluster-manager/hub/grpc-server/clusterrole.yaml b/manifests/cluster-manager/hub/grpc-server/clusterrole.yaml
index 8d22ec230..819ade261 100644
--- a/manifests/cluster-manager/hub/grpc-server/clusterrole.yaml
+++ b/manifests/cluster-manager/hub/grpc-server/clusterrole.yaml
@@ -48,3 +48,6 @@ rules:
 - apiGroups: ["work.open-cluster-management.io" ]
   resources: ["manifestworks/status" ]
   verbs: ["patch", "update"]
+- apiGroups: ["authentication.k8s.io"]
+  resources: ["tokenreviews"]
+  verbs: ["create"]