diff --git a/pkg/services/accesscontrol/roles.go b/pkg/services/accesscontrol/roles.go
index a781fb6f8ca..16656ddb214 100644
--- a/pkg/services/accesscontrol/roles.go
+++ b/pkg/services/accesscontrol/roles.go
@@ -208,6 +208,14 @@ var (
 				Action: ActionSettingsWrite,
 				Scope:  ScopeSettingsAuth,
 			},
+			{
+				Action: ActionSettingsRead,
+				Scope:  ScopeSettingsSAML,
+			},
+			{
+				Action: ActionSettingsWrite,
+				Scope:  ScopeSettingsSAML,
+			},
 		},
 	}
 )