diff --git a/examples/chart/teleport-auto-trustedcluster/templates/clusterrole.yaml b/examples/chart/teleport-auto-trustedcluster/templates/clusterrole.yaml
index 270dfbaea79..c7fa27ffa49 100644
--- a/examples/chart/teleport-auto-trustedcluster/templates/clusterrole.yaml
+++ b/examples/chart/teleport-auto-trustedcluster/templates/clusterrole.yaml
@@ -14,4 +14,10 @@ rules:
   - serviceaccounts
   verbs:
   - impersonate
+- apiGroups:
+  - "authorization.k8s.io"
+  resources:
+  - selfsubjectaccessreviews
+  verbs:
+  - create
 {{- end -}}
diff --git a/examples/chart/teleport-daemonset/templates/clusterrole.yaml b/examples/chart/teleport-daemonset/templates/clusterrole.yaml
index 475f971b314..32f3d7a4863 100644
--- a/examples/chart/teleport-daemonset/templates/clusterrole.yaml
+++ b/examples/chart/teleport-daemonset/templates/clusterrole.yaml
@@ -14,6 +14,12 @@ rules:
   - serviceaccounts
   verbs:
   - impersonate
+- apiGroups:
+  - "authorization.k8s.io"
+  resources:
+  - selfsubjectaccessreviews
+  verbs:
+  - create
 {{ if .Values.usePSP -}}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
diff --git a/examples/chart/teleport-demo/templates/generic/teleport-k8s.yaml b/examples/chart/teleport-demo/templates/generic/teleport-k8s.yaml
index 70015c696b3..fb4c3b3360d 100644
--- a/examples/chart/teleport-demo/templates/generic/teleport-k8s.yaml
+++ b/examples/chart/teleport-demo/templates/generic/teleport-k8s.yaml
@@ -18,6 +18,12 @@ rules:
   - groups
   verbs:
   - impersonate
+- apiGroups:
+  - "authorization.k8s.io"
+  resources:
+  - selfsubjectaccessreviews
+  verbs:
+  - create
 ---
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
@@ -115,4 +121,4 @@ subjects:
   name: teleport-users
 {{- end -}}
 {{- end -}}
-{{- end }}
\ No newline at end of file
+{{- end }}
diff --git a/examples/chart/teleport/templates/clusterrole.yaml b/examples/chart/teleport/templates/clusterrole.yaml
index 270dfbaea79..c7fa27ffa49 100644
--- a/examples/chart/teleport/templates/clusterrole.yaml
+++ b/examples/chart/teleport/templates/clusterrole.yaml
@@ -14,4 +14,10 @@ rules:
   - serviceaccounts
   verbs:
   - impersonate
+- apiGroups:
+  - "authorization.k8s.io"
+  resources:
+  - selfsubjectaccessreviews
+  verbs:
+  - create
 {{- end -}}