diff --git a/pkg/keystone/locale/predefined_yaml.go b/pkg/keystone/locale/predefined_yaml.go
index 0e78a8db0b..c2c63d2a85 100644
--- a/pkg/keystone/locale/predefined_yaml.go
+++ b/pkg/keystone/locale/predefined_yaml.go
@@ -46,9 +46,15 @@ policy:
   image:
     '*':
       '*': allow
+  identity:
+    '*':
+	  '*': deny
+	  list: allow
+	  get: allow
   log:
     actions:
       list: deny
+	  get: deny
 `
 
 var secAdminPolicy = `
@@ -104,6 +110,7 @@ policy:
   log:
     actions:
       list: deny
+	  get: deny
   yunionconf:
     '*':
       '*': allow
@@ -119,6 +126,11 @@ policy:
       '*': deny
       get: allow
       list: allow
+  identity:
+	'*':
+	  '*': deny
+	  list: allow
+	  get: allow
 `
 
 var normalUserPolicy = `