diff --git a/roles/openshift/project/templates/role-appowners.yml b/roles/openshift/project/templates/role-appowners.yml
index 4550f7d759..d8d3b5c499 100644
--- a/roles/openshift/project/templates/role-appowners.yml
+++ b/roles/openshift/project/templates/role-appowners.yml
@@ -14,6 +14,7 @@ rules:
   - endpoints
   - persistentvolumeclaims
   - pods
+  - pods/attach
   - pods/exec
   - replicationcontrollers
   - serviceaccounts
@@ -23,7 +24,6 @@ rules:
   - list
   - watch
 {% if env == "staging" %}
-  - attach
   - create
   - delete
   - update