diff --git a/pkg/services/accesscontrol/roles.go b/pkg/services/accesscontrol/roles.go
index b9ce718556ae..5c82eefb8f40 100644
--- a/pkg/services/accesscontrol/roles.go
+++ b/pkg/services/accesscontrol/roles.go
@@ -270,6 +270,10 @@ var (
 		Description: "Read and update the Grafana instance's general authentication configuration.",
 		Group:       "Settings",
 		Permissions: []Permission{
+			{
+				Action: ActionSettingsRead,
+				Scope:  "settings:auth:oauth_allow_insecure_email_lookup",
+			},
 			{
 				Action: ActionSettingsWrite,
 				Scope:  "settings:auth:oauth_allow_insecure_email_lookup",