diff --git a/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java
index 38b78ad357bf5..d851cdb8893f6 100644
--- a/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java
+++ b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java
@@ -80,6 +80,8 @@ static RoleDescriptor kibanaSystem(String name) {
                 // For Fleet package upgrade
                 "manage_pipeline",
                 "manage_ilm",
+                // For Fleet sync integrations feature
+                "manage_ccr",
                 // For connectors telemetry
                 "monitor_connector",
                 // For the endpoint package that ships a transform