diff --git a/apps/rbac/const.py b/apps/rbac/const.py
index 540ff35a5..fea685159 100644
--- a/apps/rbac/const.py
+++ b/apps/rbac/const.py
@@ -79,6 +79,8 @@ only_system_permissions = (
     ('rbac', 'systemrole', '*', '*'),
     ('rbac', 'rolebinding', '*', '*'),
     ('rbac', 'systemrolebinding', '*', '*'),
+    ('rbac', 'orgrole', 'delete,add,change', '*'),
+    ('rbac', 'orgrolebinding', 'delete,add,change', '*'),
     ('orgs', 'organization', '*', '*'),
     ('xpack', 'license', '*', '*'),
     ('settings', 'setting', '*', '*'),