diff --git a/pkg/cloudcommon/policy/defaults.go b/pkg/cloudcommon/policy/defaults.go
index 85378b27b2..63fbc982ec 100644
--- a/pkg/cloudcommon/policy/defaults.go
+++ b/pkg/cloudcommon/policy/defaults.go
@@ -27,6 +27,12 @@ var (
 			Action:   PolicyActionGet,
 			Result:   rbacutils.UserAllow,
 		},
+		{
+			Service:  "compute",
+			Resource: "metadatas",
+			Action:   PolicyActionList,
+			Result:   rbacutils.UserAllow,
+		},
 		{
 			Service:  "compute",
 			Resource: "storages",