diff --git a/templates/backstage-rbac.yaml b/templates/backstage-rbac.yaml
index ad464b1..5a19b32 100644
--- a/templates/backstage-rbac.yaml
+++ b/templates/backstage-rbac.yaml
@@ -11,10 +11,10 @@ rules:
     resources: ["namespaces"]
     verbs: ["get", "list", "watch", "delete"]
 
-  # Read access to environment resources for display
+  # Read access to environment resources for display, plus ConfigMap management for allhosts
   - apiGroups: [""]
-    resources: ["resourcequotas", "limitranges", "pods", "services"]
-    verbs: ["get", "list", "watch"]
+    resources: ["resourcequotas", "limitranges", "pods", "services", "configmaps"]
+    verbs: ["get", "list", "watch", "create", "patch", "update"]
 
   # Pod logs access for Backstage Kubernetes plugin
   - apiGroups: [""]