diff --git a/roles/openshift-apps/application-monitoring/files/prometheus-operator/example/rbac/prometheus/prometheus-cluster-role.yaml b/roles/openshift-apps/application-monitoring/files/prometheus-operator/example/rbac/prometheus/prometheus-cluster-role.yaml
index d63d59f023..2a0070ea47 100644
--- a/roles/openshift-apps/application-monitoring/files/prometheus-operator/example/rbac/prometheus/prometheus-cluster-role.yaml
+++ b/roles/openshift-apps/application-monitoring/files/prometheus-operator/example/rbac/prometheus/prometheus-cluster-role.yaml
@@ -3,6 +3,18 @@ kind: ClusterRole
 metadata:
   name: prometheus
 rules:
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
 - apiGroups: [""]
   resources:
   - nodes
@@ -13,6 +25,7 @@ rules:
 - apiGroups: [""]
   resources:
   - configmaps
+  - namespaces # Required to get through the alertmanager oauth proxy
   verbs: ["get"]
 - nonResourceURLs: ["*"]
   verbs: ["get"]
diff --git a/roles/openshift-apps/bodhi/files/servicemonitor.yml b/roles/openshift-apps/bodhi/files/servicemonitor.yml
index 74a8151e75..6720f5d456 100644
--- a/roles/openshift-apps/bodhi/files/servicemonitor.yml
+++ b/roles/openshift-apps/bodhi/files/servicemonitor.yml
@@ -3,11 +3,11 @@ kind: ServiceMonitor
 metadata:
   labels:
     monitoring-key: 'cpe'
-  name: bodhi-web
+  name: bodhi-service
 spec:
   endpoints:
     - path: /metrics
       port: web
   selector:
     matchLabels:
-      service: web
\ No newline at end of file
+      app: bodhi
\ No newline at end of file