diff --git a/pkg/scaffold/v2/crd_editor_rbac.go b/pkg/scaffold/v2/crd_editor_rbac.go
index 38d10189db..e07b82a42f 100644
--- a/pkg/scaffold/v2/crd_editor_rbac.go
+++ b/pkg/scaffold/v2/crd_editor_rbac.go
@@ -50,7 +50,7 @@ func (g *CRDEditorRole) Validate() error {
 	return g.Resource.Validate()
 }
 
-const crdRoleEditorTemplate = `# permissions to do edit {{ .Resource.Resource }}.
+const crdRoleEditorTemplate = `# permissions for end users to edit {{ .Resource.Resource }}.
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -74,6 +74,4 @@ rules:
   - {{ .Resource.Resource }}/status
   verbs:
   - get
-  - patch
-  - update
 `
diff --git a/pkg/scaffold/v2/crd_viewer_rbac.go b/pkg/scaffold/v2/crd_viewer_rbac.go
index 47c9ddd2db..38c4ea3452 100644
--- a/pkg/scaffold/v2/crd_viewer_rbac.go
+++ b/pkg/scaffold/v2/crd_viewer_rbac.go
@@ -50,7 +50,7 @@ func (g *CRDViewerRole) Validate() error {
 	return g.Resource.Validate()
 }
 
-const crdRoleViewerTemplate = `# permissions to do viewer {{ .Resource.Resource }}.
+const crdRoleViewerTemplate = `# permissions for end users to view {{ .Resource.Resource }}.
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
diff --git a/testdata/project-v2/config/rbac/admiral_editor_role.yaml b/testdata/project-v2/config/rbac/admiral_editor_role.yaml
index 145c42c13f..7f2cc5cd99 100644
--- a/testdata/project-v2/config/rbac/admiral_editor_role.yaml
+++ b/testdata/project-v2/config/rbac/admiral_editor_role.yaml
@@ -1,4 +1,4 @@
-# permissions to do edit admirals.
+# permissions for end users to edit admirals.
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -22,5 +22,3 @@ rules:
   - admirals/status
   verbs:
   - get
-  - patch
-  - update
diff --git a/testdata/project-v2/config/rbac/admiral_viewer_role.yaml b/testdata/project-v2/config/rbac/admiral_viewer_role.yaml
index cc14e92bcf..ddbb0c2a85 100644
--- a/testdata/project-v2/config/rbac/admiral_viewer_role.yaml
+++ b/testdata/project-v2/config/rbac/admiral_viewer_role.yaml
@@ -1,4 +1,4 @@
-# permissions to do viewer admirals.
+# permissions for end users to view admirals.
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
diff --git a/testdata/project-v2/config/rbac/captain_editor_role.yaml b/testdata/project-v2/config/rbac/captain_editor_role.yaml
index 0f09140a92..4b53ae38ff 100644
--- a/testdata/project-v2/config/rbac/captain_editor_role.yaml
+++ b/testdata/project-v2/config/rbac/captain_editor_role.yaml
@@ -1,4 +1,4 @@
-# permissions to do edit captains.
+# permissions for end users to edit captains.
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -22,5 +22,3 @@ rules:
   - captains/status
   verbs:
   - get
-  - patch
-  - update
diff --git a/testdata/project-v2/config/rbac/captain_viewer_role.yaml b/testdata/project-v2/config/rbac/captain_viewer_role.yaml
index d3d4f2fb35..f19e10439d 100644
--- a/testdata/project-v2/config/rbac/captain_viewer_role.yaml
+++ b/testdata/project-v2/config/rbac/captain_viewer_role.yaml
@@ -1,4 +1,4 @@
-# permissions to do viewer captains.
+# permissions for end users to view captains.
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
diff --git a/testdata/project-v2/config/rbac/firstmate_editor_role.yaml b/testdata/project-v2/config/rbac/firstmate_editor_role.yaml
index 07e6541ae0..22a08be29d 100644
--- a/testdata/project-v2/config/rbac/firstmate_editor_role.yaml
+++ b/testdata/project-v2/config/rbac/firstmate_editor_role.yaml
@@ -1,4 +1,4 @@
-# permissions to do edit firstmates.
+# permissions for end users to edit firstmates.
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -22,5 +22,3 @@ rules:
   - firstmates/status
   verbs:
   - get
-  - patch
-  - update
diff --git a/testdata/project-v2/config/rbac/firstmate_viewer_role.yaml b/testdata/project-v2/config/rbac/firstmate_viewer_role.yaml
index 042b1f9ab3..9fd6ba933c 100644
--- a/testdata/project-v2/config/rbac/firstmate_viewer_role.yaml
+++ b/testdata/project-v2/config/rbac/firstmate_viewer_role.yaml
@@ -1,4 +1,4 @@
-# permissions to do viewer firstmates.
+# permissions for end users to view firstmates.
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata: