diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
index 66a7b3a27032..563470f9404d 100644
--- a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
+++ b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
@@ -1206,7 +1206,7 @@ public void preDecommissionRegionServers(ObserverContext<MasterCoprocessorEnviro
   @Override
   public void preListDecommissionedRegionServers(ObserverContext<MasterCoprocessorEnvironment> ctx)
     throws IOException {
-    requirePermission(ctx, "listDecommissionedRegionServers", Action.ADMIN);
+    requirePermission(ctx, "listDecommissionedRegionServers", Action.READ);
   }
 
   @Override