diff --git a/apps/assets/api/system_user_relation.py b/apps/assets/api/system_user_relation.py
index 36c16a09b..2d8018e4d 100644
--- a/apps/assets/api/system_user_relation.py
+++ b/apps/assets/api/system_user_relation.py
@@ -68,6 +68,7 @@ class BaseRelationViewSet(RelationMixin, OrgBulkModelViewSet):
 
 
 class SystemUserAssetRelationViewSet(BaseRelationViewSet):
+    perm_model = models.AuthBook
     serializer_class = serializers.SystemUserAssetRelationSerializer
     model = models.SystemUser.assets.through
     filterset_fields = [
diff --git a/apps/rbac/const.py b/apps/rbac/const.py
index 250a30a0e..b5d584e0b 100644
--- a/apps/rbac/const.py
+++ b/apps/rbac/const.py
@@ -39,7 +39,7 @@ exclude_permissions = (
     ('assets', 'assetuser', '*', '*'),
     ('assets', 'gathereduser', 'add,delete,change', 'gathereduser'),
     ('assets', 'accountbackupplanexecution', 'delete,change', 'accountbackupplanexecution'),
-    ('assets', 'authbook', 'add,change', 'authbook'),
+    ('assets', 'authbook', 'change', 'authbook'),
     ('perms', 'userassetgrantedtreenoderelation', '*', '*'),
     ('perms', 'usergrantedmappingnode', '*', '*'),
     ('perms', 'permnode', '*', '*'),