diff --git a/services/accesstokenmanager/access_token.cfg b/services/accesstokenmanager/access_token.cfg
index 14bcdaa1ea6a86f938adfbb9fed2541fc89b4542..99003f418eb0e4bf1bc0ea489184652581730c9c 100644
--- a/services/accesstokenmanager/access_token.cfg
+++ b/services/accesstokenmanager/access_token.cfg
@@ -13,6 +13,8 @@
             "importance" : -20,
             "uid" : "system",
             "gid" : ["system"],
+            "permission" : ["ohos.permission.GET_SENSITIVE_PERMISSIONS"],
+            "permission_acls" : ["ohos.permission.GET_SENSITIVE_PERMISSIONS"],
             "secon" : "u:r:accesstoken_service:s0"
         }
     ]