diff --git a/apps/rbac/const.py b/apps/rbac/const.py
index 61a009e1c..15ae12b05 100644
--- a/apps/rbac/const.py
+++ b/apps/rbac/const.py
@@ -23,6 +23,10 @@ exclude_permissions = (
     ('common', 'setting', '*', '*'),
 
     ('authentication', 'privatetoken', '*', '*'),
+    ('authentication', 'accesskey', 'change,delete', 'accesskey'),
+    ('authentication', 'connectiontoken', 'change,delete', 'connectiontoken'),
+    ('authentication', 'ssotoken', 'change,delete', 'ssotoken'),
+    ('authentication', 'superconnectiontoken', 'change,delete', 'superconnectiontoken'),
     ('users', 'userpasswordhistory', '*', '*'),
     ('applications', 'applicationuser', '*', '*'),
     ('applications', 'historicalaccount', '*', '*'),
@@ -56,9 +60,9 @@ exclude_permissions = (
     ('audits', 'passwordchangelog', 'add,change,delete', 'passwordchangelog'),
     ('audits', 'userloginlog', 'add,change,delete,change', 'userloginlog'),
     ('audits', 'ftplog', 'change,delete', 'ftplog'),
-    ('tickets', 'ticket', '*', '*'),
     ('tickets', 'ticketflow', 'add,delete', 'ticketflow'),
     ('tickets', 'comment', 'change,delete', 'comment'),
+    ('tickets', 'ticket', 'delete', 'ticket'),
     ('tickets', 'ticketstep', '*', '*'),
     ('tickets', 'approvalrule', '*', '*'),
     ('xpack', 'interface', '*', '*'),
@@ -76,6 +80,7 @@ exclude_permissions = (
 
 
 only_system_permissions = (
+    ('assets', 'platform', '*', '*'),
     ('users', 'user', 'delete', 'user'),
     ('rbac', 'role', 'delete,add,change', 'role'),
     ('rbac', 'systemrole', '*', '*'),