diff --git a/charts/cluster-auth-manager/templates/k8s/cluster_role.yaml b/charts/cluster-auth-manager/templates/k8s/cluster_role.yaml
index e69f5759..4643e53a 100644
--- a/charts/cluster-auth-manager/templates/k8s/cluster_role.yaml
+++ b/charts/cluster-auth-manager/templates/k8s/cluster_role.yaml
@@ -75,9 +75,7 @@ rules:
       - rolebindings
     verbs: [ "*" ]
   - apiGroups: [ "authentication.k8s.appscode.com" ]
-    resources:
-      - users
-      - groups
+    resources: [ "*" ]
     verbs: [ "*" ]
 
 {{- end }}