diff --git a/.github/workflows/build-and-release-snapshot-plugin.yml b/.github/workflows/build-and-release-snapshot-plugin.yml
index 74f8ec7192..9a01a0c7a1 100644
--- a/.github/workflows/build-and-release-snapshot-plugin.yml
+++ b/.github/workflows/build-and-release-snapshot-plugin.yml
@@ -1,5 +1,8 @@
 name: Kanvas Snapshot Build & Release
-
+permissions:
+  contents: write
+  actions: read
+  
 on:
   release:
     types: [published]