diff --git a/src/layout/components/NavHeader/AccountDropdown.vue b/src/layout/components/NavHeader/AccountDropdown.vue
index 4bc375a72..639b74968 100644
--- a/src/layout/components/NavHeader/AccountDropdown.vue
+++ b/src/layout/components/NavHeader/AccountDropdown.vue
@@ -13,7 +13,7 @@
         <el-dropdown-item v-if="$hasPerm('authentication.view_accesskey')" icon="el-icon-key" command="apiKey">
           {{ $t('common.nav.APIKey') }}
         </el-dropdown-item>
-        <el-dropdown-item v-if="$store.getters.publicSettings.AUTH_TEMP_TOKEN" icon="el-icon-magic-stick" command="tempPassword">
+        <el-dropdown-item v-if="$store.getters.publicSettings.AUTH_TEMP_TOKEN && $hasPerm('authentication.view_temptoken')" icon="el-icon-magic-stick" command="tempPassword">
           {{ $t('common.nav.TempPassword') }}
         </el-dropdown-item>
         <el-dropdown-item divided command="logout"><svg-icon icon-class="logout" style="margin-right: 4px" />
diff --git a/src/router/profile/index.js b/src/router/profile/index.js
index a1652ead7..d015ce20e 100644
--- a/src/router/profile/index.js
+++ b/src/router/profile/index.js
@@ -62,7 +62,7 @@ export default {
         title: i18n.t('common.nav.TempPassword'),
         icon: 'magic',
         hidden: ({ settings }) => !settings['AUTH_TEMP_TOKEN'],
-        permissions: []
+        permissions: ['authentication.view_temptoken']
       }
     }
   ]