diff --git a/coderd/audit.go b/coderd/audit.go
index b30dd37c28..eaac13a66c 100644
--- a/coderd/audit.go
+++ b/coderd/audit.go
@@ -79,7 +79,7 @@ func (api *API) auditLogs(rw http.ResponseWriter, r *http.Request) {
 
 func (api *API) generateFakeAuditLog(rw http.ResponseWriter, r *http.Request) {
 	ctx := r.Context()
-	if !api.Authorize(r, rbac.ActionRead, rbac.ResourceAuditLog) {
+	if !api.Authorize(r, rbac.ActionCreate, rbac.ResourceAuditLog) {
 		httpapi.Forbidden(rw)
 		return
 	}