diff --git a/config/200-addressable-resolvers-clusterrole.yaml b/config/200-addressable-resolvers-clusterrole.yaml
index 275ee263b38..2a5818e1347 100644
--- a/config/200-addressable-resolvers-clusterrole.yaml
+++ b/config/200-addressable-resolvers-clusterrole.yaml
@@ -24,7 +24,26 @@ aggregationRule:
 rules: [] # Rules are automatically filled in by the controller manager.
 
 ---
- 
+
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: service-addressable-resolver
+  labels:
+      duck.knative.dev/addressable: "true"
+# Do not use this role directly. These rules will be added to the "addressable-resolver" role.
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - services
+  verbs:
+  - get
+  - list
+  - watch
+
+---
+
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata: