diff --git a/hbase-rsgroup/src/main/java/org/apache/hadoop/hbase/rsgroup/RSGroupAdminEndpoint.java b/hbase-rsgroup/src/main/java/org/apache/hadoop/hbase/rsgroup/RSGroupAdminEndpoint.java
index 7b22b8a30617..0d5188ce735d 100644
--- a/hbase-rsgroup/src/main/java/org/apache/hadoop/hbase/rsgroup/RSGroupAdminEndpoint.java
+++ b/hbase-rsgroup/src/main/java/org/apache/hadoop/hbase/rsgroup/RSGroupAdminEndpoint.java
@@ -447,6 +447,7 @@ public void updateRSGroupConfig(RpcController controller, UpdateRSGroupConfigReq
         if (master.getMasterCoprocessorHost() != null) {
           master.getMasterCoprocessorHost().preUpdateRSGroupConfig(groupName, configuration);
         }
+        checkPermission("updateRSGroupConfig");
         groupAdminServer.updateRSGroupConfig(groupName, configuration);
         if (master.getMasterCoprocessorHost() != null) {
           master.getMasterCoprocessorHost().postUpdateRSGroupConfig(groupName, configuration);