diff --git a/pkg/reconciler/tenancy/replicateclusterrole/replicateclusterrole_controller.go b/pkg/reconciler/tenancy/replicateclusterrole/replicateclusterrole_controller.go
index 584834053c2..e3cc52ef3f4 100644
--- a/pkg/reconciler/tenancy/replicateclusterrole/replicateclusterrole_controller.go
+++ b/pkg/reconciler/tenancy/replicateclusterrole/replicateclusterrole_controller.go
@@ -57,7 +57,7 @@ func HasUseRule(clusterName logicalcluster.Name, cr *rbacv1.ClusterRole) bool {
 		}
 		resources := sets.NewString(rule.Resources...)
 		verbs := sets.NewString(rule.Verbs...)
-		if (resources.Has("workspacetypes") || resources.Has("*")) && (verbs.Has("use") || verbs.Has("*")) {
+		if (resources.Has("workspacetypes") || resources.Has("*")) && (verbs.Has("use") || verbs.Has("initialize") || verbs.Has("*")) {
 			return true
 		}
 	}