diff --git a/apps/rbac/const.py b/apps/rbac/const.py
index 2bac12c5d..1ba3d1802 100644
--- a/apps/rbac/const.py
+++ b/apps/rbac/const.py
@@ -24,7 +24,7 @@ exclude_permissions = (
     ('authentication', 'privatetoken', '*', '*'),
     ('authentication', 'accesskey', 'change,delete', 'accesskey'),
     ('authentication', 'connectiontoken', 'change,delete', 'connectiontoken'),
-    ('authentication', 'ssotoken', 'change,delete', 'ssotoken'),
+    ('authentication', 'ssotoken', '*', '*'),
     ('authentication', 'superconnectiontoken', 'change,delete', 'superconnectiontoken'),
     ('users', 'userpasswordhistory', '*', '*'),
     ('applications', 'applicationuser', '*', '*'),