diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3471d3dd..24769475 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -38,6 +38,8 @@ All notable changes to this project will be documented in this file.
   - The default Kubernetes cluster domain name is now fetched from the kubelet API unless explicitly configured.
   - This requires operators to have the RBAC permission to get nodes/proxy in the apiGroup "". The helm-chart takes care of this.
   - The CLI argument `--kubernetes-node-name` or env variable `KUBERNETES_NODE_NAME` needs to be set. The helm-chart takes care of this.
+- The operator helm-chart now grants RBAC `patch` permissions on `events.k8s.io/events`,
+  so events can be aggregated (e.g. "error happened 10 times over the last 5 minutes") ([#824]).
 
 ### Fixed
 
@@ -72,6 +74,7 @@ All notable changes to this project will be documented in this file.
 [#818]: https://github.com/stackabletech/nifi-operator/pull/818
 [#819]: https://github.com/stackabletech/nifi-operator/pull/819
 [#822]: https://github.com/stackabletech/nifi-operator/pull/822
+[#824]: https://github.com/stackabletech/nifi-operator/pull/824
 
 ## [25.3.0] - 2025-03-21
 
diff --git a/deploy/helm/nifi-operator/templates/roles.yaml b/deploy/helm/nifi-operator/templates/roles.yaml
index 85256482..7d6ca35c 100644
--- a/deploy/helm/nifi-operator/templates/roles.yaml
+++ b/deploy/helm/nifi-operator/templates/roles.yaml
@@ -164,6 +164,7 @@ rules:
       - events
     verbs:
       - create
+      - patch
   # Required for Kubernetes-managed clustering, see https://nifi.apache.org/nifi-docs/administration-guide.html#kubernetes-clustering
   - apiGroups:
       - coordination.k8s.io