diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index b89c91a..3891848 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -70,7 +70,7 @@ rules:
 - apiGroups:
   - grafana.snappcloud.io
   resources:
-  - grafana
+  - grafanausers
   verbs:
   - create
   - delete
@@ -82,13 +82,13 @@ rules:
 - apiGroups:
   - grafana.snappcloud.io
   resources:
-  - grafana/finalizers
+  - grafanausers/finalizers
   verbs:
   - update
 - apiGroups:
   - grafana.snappcloud.io
   resources:
-  - grafana/status
+  - grafanausers/status
   verbs:
   - get
   - patch
diff --git a/controllers/grafanauser/grafanauser_controller.go b/controllers/grafanauser/grafanauser_controller.go
index c456eca..16c75d0 100644
--- a/controllers/grafanauser/grafanauser_controller.go
+++ b/controllers/grafanauser/grafanauser_controller.go
@@ -49,9 +49,9 @@ type GrafanaUserReconciler struct {
 	Scheme *runtime.Scheme
 }
 
-//+kubebuilder:rbac:groups=grafana.snappcloud.io,resources=grafana,verbs=get;list;watch;create;update;patch;delete
-//+kubebuilder:rbac:groups=grafana.snappcloud.io,resources=grafana/status,verbs=get;update;patch
-//+kubebuilder:rbac:groups=grafana.snappcloud.io,resources=grafana/finalizers,verbs=update
+//+kubebuilder:rbac:groups=grafana.snappcloud.io,resources=grafanausers,verbs=get;list;watch;create;update;patch;delete
+//+kubebuilder:rbac:groups=grafana.snappcloud.io,resources=grafanausers/status,verbs=get;update;patch
+//+kubebuilder:rbac:groups=grafana.snappcloud.io,resources=grafanausers/finalizers,verbs=update
 //+kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch;create;update;patch;delete
 //+kubebuilder:rbac:groups=user.openshift.io,resources=*,verbs=get;list;watch;create;update;patch;delete