diff --git a/pkg/registry/apis/secret/accesscontrol.go b/pkg/registry/apis/secret/accesscontrol.go
index 2262961c087..d0561843ce7 100644
--- a/pkg/registry/apis/secret/accesscontrol.go
+++ b/pkg/registry/apis/secret/accesscontrol.go
@@ -45,7 +45,7 @@ func registerAccessControlRoles(service accesscontrol.Service) error {
 				},
 			},
 		},
-		Grants: []string{string(org.RoleEditor)},
+		Grants: []string{string(org.RoleAdmin)},
 	}
 
 	secureValuesReader := accesscontrol.RoleRegistration{
@@ -93,7 +93,7 @@ func registerAccessControlRoles(service accesscontrol.Service) error {
 				},
 			},
 		},
-		Grants: []string{string(org.RoleEditor)},
+		Grants: []string{string(org.RoleAdmin)},
 	}
 
 	// Keepers