diff --git a/.github/workflows/approved-label.yml b/.github/workflows/approved-label.yml
index 9fbc5ed0ae8..bdeadab2909 100644
--- a/.github/workflows/approved-label.yml
+++ b/.github/workflows/approved-label.yml
@@ -4,6 +4,8 @@ jobs:
   add_label:
     name: Add "approved" label when approved
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
     - name: Add "approved" label when approved
       uses: pullreminders/label-when-approved-action@master