diff --git a/setup/kubernetes/roles/nuvolaris-wsku-roles.yaml b/setup/kubernetes/roles/nuvolaris-wsku-roles.yaml
index 101cff0..a9d4cfa 100644
--- a/setup/kubernetes/roles/nuvolaris-wsku-roles.yaml
+++ b/setup/kubernetes/roles/nuvolaris-wsku-roles.yaml
@@ -37,6 +37,14 @@ rules:
 - apiGroups: ["batch"]
   resources: ["jobs"]
   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+# assign the possibility to operate on secrets (admin api builder)
+- apiGroups: [""]
+  resources: ["secrets"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+# assign the possibility to monitor build pods (admin api builder)
+- apiGroups: [""]
+  resources: ["pods", "pods/log"]
+  verbs: ["get", "list", "watch"]
 
 ---
 kind: RoleBinding