diff --git a/plugin/ceph/src/main/java/org/zstack/storage/ceph/RBACInfo.java b/plugin/ceph/src/main/java/org/zstack/storage/ceph/RBACInfo.java
index 90db25c5006..6c4692a1eed 100755
--- a/plugin/ceph/src/main/java/org/zstack/storage/ceph/RBACInfo.java
+++ b/plugin/ceph/src/main/java/org/zstack/storage/ceph/RBACInfo.java
@@ -2,6 +2,7 @@
 
 import org.zstack.header.identity.rbac.RBACDescription;
 import org.zstack.storage.ceph.backup.APIQueryCephBackupStorageMsg;
+import org.zstack.storage.ceph.primary.APIQueryCephPrimaryStoragePoolMsg;
 
 public class RBACInfo implements RBACDescription {
     @Override
@@ -13,7 +14,10 @@ public String permissionName() {
     public void permissions() {
         permissionBuilder()
                 .adminOnlyForAll()
-                .normalAPIs(APIQueryCephBackupStorageMsg.class)
+                .normalAPIs(
+                        APIQueryCephBackupStorageMsg.class,
+                        APIQueryCephPrimaryStoragePoolMsg.class
+                )
                 .communityAvailable()
                 .zsvBasicAvailable()
                 .zsvProAvailable()