diff --git a/apps/settings/api/dingtalk.py b/apps/settings/api/dingtalk.py
index 196f259dc..216aeee0b 100644
--- a/apps/settings/api/dingtalk.py
+++ b/apps/settings/api/dingtalk.py
@@ -11,6 +11,9 @@ from .. import serializers
 
 class DingTalkTestingAPI(GenericAPIView):
     serializer_class = serializers.DingTalkSettingSerializer
+    rbac_perms = {
+        'POST': 'settings.change_auth'
+    }
 
     def post(self, request):
         serializer = self.serializer_class(data=request.data)