diff --git a/backend/src/services/dynamic-secret-lease/dynamic-secret-lease-service.ts b/backend/src/services/dynamic-secret-lease/dynamic-secret-lease-service.ts
index ecddcd04a..99358175f 100644
--- a/backend/src/services/dynamic-secret-lease/dynamic-secret-lease-service.ts
+++ b/backend/src/services/dynamic-secret-lease/dynamic-secret-lease-service.ts
@@ -71,7 +71,7 @@ export const dynamicSecretLeaseServiceFactory = ({
       actorOrgId
     );
     ForbiddenError.from(permission).throwUnlessCan(
-      ProjectPermissionActions.Create,
+      ProjectPermissionActions.Read,
       subject(ProjectPermissionSub.Secrets, { environment: environmentSlug, secretPath: path })
     );
 
diff --git a/backend/src/services/dynamic-secret/dynamic-secret-service.ts b/backend/src/services/dynamic-secret/dynamic-secret-service.ts
index 48d203ff2..a8064659a 100644
--- a/backend/src/services/dynamic-secret/dynamic-secret-service.ts
+++ b/backend/src/services/dynamic-secret/dynamic-secret-service.ts
@@ -320,7 +320,7 @@ export const dynamicSecretServiceFactory = ({
       actorOrgId
     );
     ForbiddenError.from(permission).throwUnlessCan(
-      ProjectPermissionActions.Edit,
+      ProjectPermissionActions.Read,
       subject(ProjectPermissionSub.Secrets, { environment: environmentSlug, secretPath: path })
     );