diff --git a/.github/workflows/e2e-tests-ci.yml b/.github/workflows/e2e-tests-ci.yml
index 1a09e772925..0fd3bfce030 100644
--- a/.github/workflows/e2e-tests-ci.yml
+++ b/.github/workflows/e2e-tests-ci.yml
@@ -213,6 +213,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: "${{ needs.resolve-pr.outputs.COMMIT_SHA }}"
@@ -240,6 +241,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: "${{ needs.resolve-pr.outputs.COMMIT_SHA }}"
@@ -265,6 +267,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: "${{ needs.resolve-pr.outputs.COMMIT_SHA }}"
@@ -292,6 +295,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: "${{ needs.resolve-pr.outputs.COMMIT_SHA }}"
diff --git a/.github/workflows/e2e-tests-cypress.yml b/.github/workflows/e2e-tests-cypress.yml
index fe638d0a51d..1153896d322 100644
--- a/.github/workflows/e2e-tests-cypress.yml
+++ b/.github/workflows/e2e-tests-cypress.yml
@@ -214,6 +214,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress-template-v2.yml
     with:
       test_type: full
diff --git a/.github/workflows/e2e-tests-on-merge.yml b/.github/workflows/e2e-tests-on-merge.yml
index 963bc9ee442..b8f3a3d907a 100644
--- a/.github/workflows/e2e-tests-on-merge.yml
+++ b/.github/workflows/e2e-tests-on-merge.yml
@@ -66,6 +66,11 @@ jobs:
   # Enterprise Edition
   e2e-cypress:
     needs: generate-build-variables
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -85,6 +90,11 @@ jobs:
 
   e2e-playwright:
     needs: generate-build-variables
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -104,6 +114,11 @@ jobs:
   e2e-cypress-fips:
     needs: generate-build-variables
     if: needs.generate-build-variables.outputs.fips_supported == 'true'
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -125,6 +140,11 @@ jobs:
   e2e-playwright-fips:
     needs: generate-build-variables
     if: needs.generate-build-variables.outputs.fips_supported == 'true'
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
diff --git a/.github/workflows/e2e-tests-on-release.yml b/.github/workflows/e2e-tests-on-release.yml
index 046766584a9..f3cfac3cb78 100644
--- a/.github/workflows/e2e-tests-on-release.yml
+++ b/.github/workflows/e2e-tests-on-release.yml
@@ -61,6 +61,11 @@ jobs:
   # Enterprise Edition
   e2e-cypress:
     needs: validate
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -82,6 +87,11 @@ jobs:
 
   e2e-playwright:
     needs: validate
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -103,6 +113,11 @@ jobs:
   e2e-cypress-fips:
     needs: validate
     if: needs.validate.outputs.fips_supported == 'true'
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-cypress.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
@@ -126,6 +141,11 @@ jobs:
   e2e-playwright-fips:
     needs: validate
     if: needs.validate.outputs.fips_supported == 'true'
+    permissions:
+      contents: read
+      statuses: write
+      id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright.yml
     with:
       commit_sha: ${{ inputs.commit_sha }}
diff --git a/.github/workflows/e2e-tests-playwright.yml b/.github/workflows/e2e-tests-playwright.yml
index 5cd410f5bf4..271ff3b3995 100644
--- a/.github/workflows/e2e-tests-playwright.yml
+++ b/.github/workflows/e2e-tests-playwright.yml
@@ -205,6 +205,7 @@ jobs:
       contents: read
       statuses: write
       id-token: write
+      pull-requests: write
     uses: ./.github/workflows/e2e-tests-playwright-template-v2.yml
     with:
       workers: 8