diff --git a/bootstrap/system-upgrades/clusterrole.yaml b/bootstrap/system-upgrades/clusterrole.yaml
index ca360cc8482e32e964fb38767f033ff2df79a587..41cab55344d1edc4738be2f7b9cc9387fb63c5cc 100644
--- a/bootstrap/system-upgrades/clusterrole.yaml
+++ b/bootstrap/system-upgrades/clusterrole.yaml
@@ -3,6 +3,14 @@ kind: ClusterRole
 metadata:
   name: system-upgrade-controller
 rules:
+- apiGroups:
+  - batch
+  resources:
+  - jobs
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - ""
   resources:
@@ -17,6 +25,7 @@ rules:
   - upgrade.cattle.io
   resources:
   - plans
+  - plans/status
   verbs:
   - get
   - list