diff --git a/cmd/defaults.yaml b/cmd/defaults.yaml
index 02157293fe..e70d6b221d 100644
--- a/cmd/defaults.yaml
+++ b/cmd/defaults.yaml
@@ -874,6 +874,7 @@ InternalAuthZ:
         - "project.grant.member.delete"
     - Role: "ORG_USER_MANAGER"
       Permissions:
+        - "org.read"
         - "user.read"
         - "user.global.read"
         - "user.write"
@@ -882,6 +883,7 @@ InternalAuthZ:
         - "user.grant.write"
         - "user.grant.delete"
         - "user.membership.read"
+        - "policy.read"
         - "project.read"
         - "project.role.read"
     - Role: "ORG_OWNER_VIEWER"