diff --git a/assets/csidriveroperators/aws-ebs/05_clusterrole.yaml b/assets/csidriveroperators/aws-ebs/05_clusterrole.yaml
index 7ea4e7f7e..4b0692600 100644
--- a/assets/csidriveroperators/aws-ebs/05_clusterrole.yaml
+++ b/assets/csidriveroperators/aws-ebs/05_clusterrole.yaml
@@ -19,6 +19,9 @@ rules:
   - get
   - list
   - watch
+  # The Config Observer controller updates the CR's spec
+  - update
+  - patch
 - apiGroups:
   - operator.openshift.io
   resources:
diff --git a/assets/csidriveroperators/gcp-pd/05_clusterrole.yaml b/assets/csidriveroperators/gcp-pd/05_clusterrole.yaml
index 39077860e..848df7e97 100644
--- a/assets/csidriveroperators/gcp-pd/05_clusterrole.yaml
+++ b/assets/csidriveroperators/gcp-pd/05_clusterrole.yaml
@@ -19,6 +19,9 @@ rules:
   - get
   - list
   - watch
+  # The Config Observer controller updates the CR's spec
+  - update
+  - patch
 - apiGroups:
   - operator.openshift.io
   resources:
diff --git a/assets/csidriveroperators/ovirt/05_clusterrole.yaml b/assets/csidriveroperators/ovirt/05_clusterrole.yaml
index 2a035d702..9c2d849b0 100644
--- a/assets/csidriveroperators/ovirt/05_clusterrole.yaml
+++ b/assets/csidriveroperators/ovirt/05_clusterrole.yaml
@@ -247,4 +247,6 @@ rules:
   - get
   - list
   - watch
+  # The Config Observer controller updates the CR's spec
   - update
+  - patch
diff --git a/pkg/generated/bindata.go b/pkg/generated/bindata.go
index 6ad75debe..122dce57a 100644
--- a/pkg/generated/bindata.go
+++ b/pkg/generated/bindata.go
@@ -263,6 +263,9 @@ rules:
   - get
   - list
   - watch
+  # The Config Observer controller updates the CR's spec
+  - update
+  - patch
 - apiGroups:
   - operator.openshift.io
   resources:
@@ -861,6 +864,9 @@ rules:
   - get
   - list
   - watch
+  # The Config Observer controller updates the CR's spec
+  - update
+  - patch
 - apiGroups:
   - operator.openshift.io
   resources:
@@ -2722,7 +2728,9 @@ rules:
   - get
   - list
   - watch
+  # The Config Observer controller updates the CR's spec
   - update
+  - patch
 `)
 
 func csidriveroperatorsOvirt05_clusterroleYamlBytes() ([]byte, error) {