diff --git a/cp3pt0-deployment/common/nss-managed-bedrock-core-role.yaml b/cp3pt0-deployment/common/nss-managed-bedrock-core-role.yaml
index 53b1364b3..ace4719ab 100644
--- a/cp3pt0-deployment/common/nss-managed-bedrock-core-role.yaml
+++ b/cp3pt0-deployment/common/nss-managed-bedrock-core-role.yaml
@@ -1657,7 +1657,7 @@ rules:
     resources:
       - secrets
     resourceNames:
-      - postgresql-operator-controller-manager-1-22-7-service-cert
+      - postgresql-operator-controller-manager-1-25-1-service-cert
   - verbs:
       - get
       - create
@@ -1679,6 +1679,7 @@ rules:
     resources:
       - databases/status
       - publications/status
+      - subscriptions/status
     apiGroups:
       - postgresql.k8s.enterprisedb.io
   - verbs:
@@ -1687,5 +1688,6 @@ rules:
       - watch
     resources:
       - imagecatalogs
+      - clusterimagecatalogs
     apiGroups:
-      - postgresql.k8s.enterprisedb.io
\ No newline at end of file
+      - postgresql.k8s.enterprisedb.io