diff --git a/config_kube-lego_helm.yaml b/config_kube-lego_helm.yaml
index c047e49..9160bd5 100644
--- a/config_kube-lego_helm.yaml
+++ b/config_kube-lego_helm.yaml
@@ -25,3 +25,7 @@ config:
   ## if no ingress class is specified
   ##
   LEGO_DEFAULT_INGRESS_CLASS: nginx
+
+## rbac creates the correct permissions
+rbac:
+  create: true