diff --git a/public/app/features/auth-config/state/actions.ts b/public/app/features/auth-config/state/actions.ts
index b231c2c0bed..07ab3512c1c 100644
--- a/public/app/features/auth-config/state/actions.ts
+++ b/public/app/features/auth-config/state/actions.ts
@@ -48,7 +48,7 @@ export function loadProviderStatuses(): ThunkResult<void> {
 
 export function saveSettings(data: UpdateSettingsQuery): ThunkResult<Promise<boolean>> {
   return async (dispatch) => {
-    if (contextSrv.hasPermission(AccessControlAction.SettingsRead)) {
+    if (contextSrv.hasPermission(AccessControlAction.SettingsWrite)) {
       try {
         await lastValueFrom(
           getBackendSrv().fetch({
diff --git a/public/app/types/accessControl.ts b/public/app/types/accessControl.ts
index d608586854b..16e7a96165e 100644
--- a/public/app/types/accessControl.ts
+++ b/public/app/types/accessControl.ts
@@ -130,6 +130,7 @@ export enum AccessControlAction {
 
   // Settings
   SettingsRead = 'settings:read',
+  SettingsWrite = 'settings:write',
 }
 
 export interface Role {