diff --git a/controllers/tenant_controller.go b/controllers/tenant_controller.go
index 96e40bf3..f256c367 100644
--- a/controllers/tenant_controller.go
+++ b/controllers/tenant_controller.go
@@ -614,8 +614,9 @@ func (r *TenantReconciler) ownerRoleBinding(tenant *capsulev1alpha1.Tenant) erro
 	l := map[string]string{tl: tenant.Name}
 	s := []rbacv1.Subject{
 		{
-			Kind: tenant.Spec.Owner.Kind.String(),
-			Name: tenant.Spec.Owner.Name,
+			APIGroup: "rbac.authorization.k8s.io",
+			Kind:     tenant.Spec.Owner.Kind.String(),
+			Name:     tenant.Spec.Owner.Name,
 		},
 	}