diff --git a/.github/workflows/build_changelog.yml b/.github/workflows/build_changelog.yml
index b2abf5aeb47..1be01306109 100644
--- a/.github/workflows/build_changelog.yml
+++ b/.github/workflows/build_changelog.yml
@@ -19,4 +19,7 @@ on:
 
 jobs:
   changelog:
+    permissions:
+      contents: write       # create temporary branch to store changelog changes
+      pull-requests: write  # create PR with changelog changes
     uses: ./.github/workflows/reusable_publish_changelog.yml