diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 44f68d7..9387496 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -4,6 +4,14 @@ kind: ClusterRole
 metadata:
   name: manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - coralogix.com
   resources:
diff --git a/controllers/alertmanagerconfig_controller.go b/controllers/alertmanagerconfig_controller.go
index 4cd592d..379878e 100644
--- a/controllers/alertmanagerconfig_controller.go
+++ b/controllers/alertmanagerconfig_controller.go
@@ -35,6 +35,8 @@ import (
 //+kubebuilder:rbac:groups=coralogix.com,resources=alerts/status,verbs=get;update;patch
 //+kubebuilder:rbac:groups=coralogix.com,resources=alerts/finalizers,verbs=update
 
+//+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch
+
 // AlertmanagerConfigReconciler reconciles a AlertmanagerConfig object
 type AlertmanagerConfigReconciler struct {
 	client.Client