diff --git a/source/lib/remediation_runbook-stack.ts b/source/lib/remediation_runbook-stack.ts
index 1b5a8b06..2449eab0 100644
--- a/source/lib/remediation_runbook-stack.ts
+++ b/source/lib/remediation_runbook-stack.ts
@@ -1358,7 +1358,7 @@ export class RemediationRunbookStack extends cdk.Stack {
       inlinePolicy.addStatements(snsPerms);
 
       const remediationPolicy = new PolicyStatement();
-      remediationPolicy.addActions('servicecatalog:GetApplication');
+      remediationPolicy.addActions('servicecatalog:GetApplication', 'iam:GetRole');
       remediationPolicy.effect = Effect.ALLOW;
       remediationPolicy.addResources('*');
       inlinePolicy.addStatements(remediationPolicy);