diff --git a/BackupPolicy b/BackupPolicy
index b2693b1..af566e5 100644
--- a/BackupPolicy
+++ b/BackupPolicy
@@ -7,6 +7,9 @@
     "effect": "deployIfNotExists",
     "details": {
       "resourceGroupName": "[parameters('vaultResourceGroup')]",
+      "roleDefinitionIds": [
+        "/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"
+      ],
       "type": "Microsoft.RecoveryServices/backupprotecteditems",
       "existenceCondition": {
         "field": "name",