diff --git a/apps/rbac/const.py b/apps/rbac/const.py
index 1c81b05fe..b8b034f94 100644
--- a/apps/rbac/const.py
+++ b/apps/rbac/const.py
@@ -24,6 +24,7 @@ exclude_permissions = (
     ('authentication', 'privatetoken', '*', '*'),
     ('authentication', 'connectiontoken', 'delete,change', 'connectiontoken'),
     ('authentication', 'connectiontoken', 'view', 'connectiontokensecret'),
+    ('authentication', 'ssotoken', 'change,delete', 'ssotoken'),
     ('authentication', 'superconnectiontoken', 'change,delete', 'superconnectiontoken'),
     ('authentication', 'temptoken', 'delete', 'temptoken'),
     ('users', 'userpasswordhistory', '*', '*'),