diff --git a/clusters/build-clusters/common/ci-operator/admin_ci-operator_rbac.yaml b/clusters/build-clusters/common/ci-operator/admin_ci-operator_rbac.yaml
index d9e9221d20a33..652f973f361e2 100644
--- a/clusters/build-clusters/common/ci-operator/admin_ci-operator_rbac.yaml
+++ b/clusters/build-clusters/common/ci-operator/admin_ci-operator_rbac.yaml
@@ -461,3 +461,36 @@ subjects:
 - kind: ServiceAccount
   name: ci-operator
   namespace: ci
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: ci-operator-machine-reader
+rules:
+- apiGroups:
+  - machine.openshift.io
+  resources:
+  - machinesets
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - autoscaling.openshift.io
+  resources:
+  - machineautoscalers
+  verbs:
+  - get
+  - list
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: ci-operator-machine-reader
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: ci-operator-machine-reader
+subjects:
+- kind: ServiceAccount
+  name: ci-operator
+  namespace: ci