diff --git a/config/brokers/channel-broker/roles/controller-clusterroles.yaml b/config/brokers/channel-broker/roles/controller-clusterroles.yaml
index e0fad77d9f5..bfcfe5acf23 100644
--- a/config/brokers/channel-broker/roles/controller-clusterroles.yaml
+++ b/config/brokers/channel-broker/roles/controller-clusterroles.yaml
@@ -33,3 +33,15 @@ rules:
       - "delete"
       - "patch"
       - "watch"
+  - apiGroups:
+      - "configs.internal.knative.dev"
+    resources:
+      - "configmappropagations/finalizers"
+    verbs:
+      - "update"
+  - apiGroups:
+      - ""
+    resources:
+      - "namespaces/finalizers"
+    verbs:
+      - "update"