diff --git a/services/accesstokenmanager/access_token.cfg b/services/accesstokenmanager/access_token.cfg
index 14bcdaa1ea6a86f938adfbb9fed2541fc89b4542..5cce772231a0c08b177b182ae7d534f624e250e3 100644
--- a/services/accesstokenmanager/access_token.cfg
+++ b/services/accesstokenmanager/access_token.cfg
@@ -13,6 +13,7 @@
             "importance" : -20,
             "uid" : "system",
             "gid" : ["system"],
+            "permission" : ["ohos.permission.GET_SENSITIVE_PERMISSIONS"],
             "secon" : "u:r:accesstoken_service:s0"
         }
     ]