diff --git a/pynitrokey/fido2/client.py b/pynitrokey/fido2/client.py
index f9c6c0ce..4e6bb006 100644
--- a/pynitrokey/fido2/client.py
+++ b/pynitrokey/fido2/client.py
@@ -365,7 +365,9 @@ def cred_mgmt(self, serial: str, pin: str) -> CredentialManagement:
         client_pin = ClientPin(device.ctap2)
 
         try:
-            client_token = client_pin.get_pin_token(pin)
+            client_token = client_pin.get_pin_token(
+                pin, permissions=ClientPin.PERMISSION.CREDENTIAL_MGMT
+            )
         except CtapError as error:
             if error.code == CtapError.ERR.PIN_NOT_SET:
                 local_critical("Please set a pin in order to manage credentials")