diff --git a/.github/workflows/update_references.yml b/.github/workflows/update_references.yml
index 7af3326ae57..8158796633c 100644
--- a/.github/workflows/update_references.yml
+++ b/.github/workflows/update_references.yml
@@ -5,6 +5,9 @@ on:
   repository_dispatch:
     types: [update-references]
   workflow_dispatch:
+permissions:
+  contents: write # Used to commit updated references PR
+  pull-requests: write # Used to create updated references PR
 env:
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}