diff --git a/application/src/main/resources/application.yaml b/application/src/main/resources/application.yaml
index 0bd9b2e56..8f9b3de6f 100644
--- a/application/src/main/resources/application.yaml
+++ b/application/src/main/resources/application.yaml
@@ -64,7 +64,7 @@ management:
   endpoints:
     web:
       exposure:
-        include: ["health", "info", "startup", "globalinfo", "logfile", "shutdown", "restart"]
+        include: "*"
   endpoint:
     shutdown:
       enabled: true
diff --git a/application/src/main/resources/extensions/role-template-actuator.yaml b/application/src/main/resources/extensions/role-template-actuator.yaml
new file mode 100644
index 000000000..7d3ecb4d6
--- /dev/null
+++ b/application/src/main/resources/extensions/role-template-actuator.yaml
@@ -0,0 +1,14 @@
+apiVersion: v1alpha1
+kind: "Role"
+metadata:
+  name: role-template-actuator
+  labels:
+    halo.run/role-template: "true"
+  annotations:
+    rbac.authorization.halo.run/module: "Actuator Management"
+    rbac.authorization.halo.run/display-name: "Actuator Manage"
+    rbac.authorization.halo.run/ui-permissions: |
+      ["system:actuator:manage"]
+rules:
+  - nonResourceURLs: [ "actuator", "/actuator/*" ]
+    verbs: [ "get" ]