diff --git a/deployment/helm/templates/workloads/core/controller-rbac.yml b/deployment/helm/templates/workloads/core/controller-rbac.yml
index c920d80b5..dd33832d5 100644
--- a/deployment/helm/templates/workloads/core/controller-rbac.yml
+++ b/deployment/helm/templates/workloads/core/controller-rbac.yml
@@ -68,6 +68,8 @@ kind: RoleBinding
 metadata:
   name: eirini-controller-workload-rolebinding
   namespace: {{ . }}
+  annotations:
+    cloudfoundry.org/propagate-cf-role : "true"
 roleRef:
   kind: ClusterRole
   name: eirini-controller-workload-runner