diff --git a/apps/assets/api/asset_user.py b/apps/assets/api/asset_user.py
index cf092dab0..8e8a217ee 100644
--- a/apps/assets/api/asset_user.py
+++ b/apps/assets/api/asset_user.py
@@ -108,10 +108,7 @@ class AssetUserViewSet(IDInCacheFilterMixin, BulkModelViewSet):
 class AssetUserExportViewSet(AssetUserViewSet):
     serializer_class = serializers.AssetUserExportSerializer
     http_method_names = ['get']
-
-    def get_permissions(self):
-        self.permission_classes.append(NeedMFAVerify)
-        return super().get_permissions()
+    permission_classes = [IsOrgAdminOrAppUser, NeedMFAVerify]
 
 
 class AssetUserAuthInfoApi(generics.RetrieveAPIView):