diff --git a/pkg/cloudcommon/policy/resources.go b/pkg/cloudcommon/policy/resources.go
index 6aeb56f7a9..d5b6ab532f 100644
--- a/pkg/cloudcommon/policy/resources.go
+++ b/pkg/cloudcommon/policy/resources.go
@@ -41,6 +41,16 @@ var (
 	}
 	yunionconfAdminResources = []string{}
 	logAdminResources        = []string{}
+	identityAdminResources   = []string{
+		"users",
+		"groups",
+		"domains",
+		"projects",
+		"roles",
+		"policies",
+		"services",
+		"endpoints",
+	}
 
 	adminResources = map[string][]string{
 		"compute":     computeAdminResources,
@@ -50,6 +60,7 @@ var (
 		"yunionagent": yunionagentAdminResources,
 		"yunionconf":  yunionconfAdminResources,
 		"log":         logAdminResources,
+		"identity":    identityAdminResources,
 	}
 )