diff --git a/superset/security/manager.py b/superset/security/manager.py
index 1a3532f262d5..57e541cbca69 100644
--- a/superset/security/manager.py
+++ b/superset/security/manager.py
@@ -433,8 +433,9 @@ class SupersetSecurityManager(  # pylint: disable=too-many-public-methods
         ("can_time_range", "Api"),
         ("can_query_form_data", "Api"),
         ("can_query", "Api"),
-        # CSS for dashboard styling
+        # CSS and themes for dashboard styling
         ("can_read", "CssTemplate"),
+        ("can_read", "Theme"),
         # Embedded dashboard support
         ("can_read", "EmbeddedDashboard"),
         # Datasource metadata for chart rendering