diff --git a/apps/ops/api/adhoc.py b/apps/ops/api/adhoc.py
index 3bb1acb53..0cc7b6d55 100644
--- a/apps/ops/api/adhoc.py
+++ b/apps/ops/api/adhoc.py
@@ -42,6 +42,9 @@ class TaskViewSet(OrgBulkModelViewSet):
 class TaskRun(generics.RetrieveAPIView):
     queryset = Task.objects.all()
     serializer_class = CeleryTaskSerializer
+    rbac_perms = {
+        'retrieve': 'ops.add_adhoc'
+    }
 
     def retrieve(self, request, *args, **kwargs):
         task = self.get_object()
diff --git a/apps/rbac/const.py b/apps/rbac/const.py
index 1ba3d1802..ea54c2474 100644
--- a/apps/rbac/const.py
+++ b/apps/rbac/const.py
@@ -50,7 +50,7 @@ exclude_permissions = (
     ('rbac', 'rolebinding', '*', '*'),
     ('rbac', 'role', '*', '*'),
     ('ops', 'adhoc', 'delete,change', '*'),
-    ('ops', 'adhocexecution', 'delete,change', '*'),
+    ('ops', 'adhocexecution', 'add,delete,change', '*'),
     ('ops', 'celerytask', '*', '*'),
     ('ops', 'task', 'add,change', 'task'),
     ('ops', 'commandexecution', 'delete,change', 'commandexecution'),