diff --git a/packages/core/upload/server/routes/admin.js b/packages/core/upload/server/routes/admin.js
index 9d1fbd9115..66db9654d2 100644
--- a/packages/core/upload/server/routes/admin.js
+++ b/packages/core/upload/server/routes/admin.js
@@ -117,7 +117,7 @@ module.exports = {
           {
             name: 'admin::hasPermissions',
             config: {
-              actions: ['plugin::upload.read'],
+              actions: ['plugin::upload.assets.create'],
             },
           },
         ],
@@ -133,7 +133,7 @@ module.exports = {
           {
             name: 'admin::hasPermissions',
             config: {
-              actions: ['plugin::upload.read'],
+              actions: ['plugin::upload.assets.update'],
             },
           },
         ],
@@ -165,7 +165,7 @@ module.exports = {
           {
             name: 'admin::hasPermissions',
             config: {
-              actions: ['plugin::upload.read'],
+              actions: ['plugin::upload.assets.update'],
             },
           },
         ],
@@ -181,7 +181,7 @@ module.exports = {
           {
             name: 'admin::hasPermissions',
             config: {
-              actions: ['plugin::upload.read'],
+              actions: ['plugin::upload.assets.update'],
             },
           },
         ],