diff --git a/manifests/00-ingress-credentials-request.yaml b/manifests/00-ingress-credentials-request.yaml
index 7878da40c0..fcea8d284b 100644
--- a/manifests/00-ingress-credentials-request.yaml
+++ b/manifests/00-ingress-credentials-request.yaml
@@ -49,8 +49,11 @@ spec:
   providerSpec:
     apiVersion: cloudcredential.openshift.io/v1
     kind: AzureProviderSpec
-    roleBindings:
-    - role: Contributor
+    permissions:
+    - Microsoft.Network/dnsZones/A/delete
+    - Microsoft.Network/dnsZones/A/write
+    - Microsoft.Network/privateDnsZones/A/delete
+    - Microsoft.Network/privateDnsZones/A/write
 ---
 apiVersion: cloudcredential.openshift.io/v1
 kind: CredentialsRequest