diff --git a/terraform/deployments/cluster-services/aws_auth_configmap.tf b/terraform/deployments/cluster-services/aws_auth_configmap.tf
index f118cc4c3..c8d9d9ca7 100644
--- a/terraform/deployments/cluster-services/aws_auth_configmap.tf
+++ b/terraform/deployments/cluster-services/aws_auth_configmap.tf
@@ -127,11 +127,18 @@ resource "kubernetes_cluster_role_binding" "read_crs_and_crbs" {
 
 resource "kubernetes_cluster_role" "poweruser" {
   metadata { name = "poweruser" }
+
   rule {
     api_groups = ["*"]
     resources  = ["*"]
     verbs      = ["*"]
   }
+
+  rule {
+    api_groups = [""]
+    resources  = ["namespaces"]
+    verbs      = ["get", "list"]
+  }
 }
 
 resource "kubernetes_role_binding" "poweruser" {