diff --git a/apps/rbac/const.py b/apps/rbac/const.py
index b5cd77f0a..88adf1199 100644
--- a/apps/rbac/const.py
+++ b/apps/rbac/const.py
@@ -78,7 +78,7 @@ exclude_permissions = (
     ('terminal', 'command', 'delete,change', 'command'),
     ('terminal', 'status', 'delete,change', 'status'),
     ('terminal', 'sessionjoinrecord', 'delete', 'sessionjoinrecord'),
-    ('terminal', 'sessionreplay', 'delete', 'sessionreplay'),
+    ('terminal', 'sessionreplay', 'add,change,delete', 'sessionreplay'),
     ('terminal', 'session', 'delete', 'session'),
     ('terminal', 'session', 'delete,change', 'command'),
 )
diff --git a/apps/terminal/api/session.py b/apps/terminal/api/session.py
index 334a19cf4..949ac8d09 100644
--- a/apps/terminal/api/session.py
+++ b/apps/terminal/api/session.py
@@ -126,7 +126,7 @@ class SessionReplayViewSet(AsyncApiMixin, viewsets.ViewSet):
     session = None
     rbac_perms = {
         'create': 'terminal.upload_sessionreplay',
-        'retrieve': 'terminal.download_sessionreplay',
+        'retrieve': 'terminal.view_sessionreplay',
     }
 
     def create(self, request, *args, **kwargs):