diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 4641eaf358..314b9c4b4e 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -5,8 +5,7 @@ on:
       - main
 
 permissions:
-  contents: write
-  deployments: write
+  contents: read
 
 jobs:
   benchmark:
@@ -46,6 +45,9 @@ jobs:
           path: benchmarks
   store_benchmark:
     needs: benchmark
+    permissions:
+      contents: write
+      deployments: write
     strategy:
       matrix:
         components: ["api", "sdk", "exporters"]