diff --git a/cmd/capdctl/main.go b/cmd/capdctl/main.go
index 6404469..b13b29e 100644
--- a/cmd/capdctl/main.go
+++ b/cmd/capdctl/main.go
@@ -1347,18 +1347,6 @@ kind: ClusterRole
 metadata:
   name: cluster-api-manager-role
 rules:
-- apiGroups:
-  - cluster.k8s.io
-  resources:
-  - clusters
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-  - delete
 - apiGroups:
   - ""
   resources:
@@ -1370,23 +1358,17 @@ rules:
   - create
   - patch
 - apiGroups:
-  - cluster.k8s.io
+  - ""
   resources:
-  - machines
-  - machines/status
+  - secrets
   verbs:
   - get
   - list
   - watch
-  - create
-  - update
-  - patch
-  - delete
 - apiGroups:
-  - cluster.k8s.io
+  - ""
   resources:
-  - machinedeployments
-  - machinedeployments/status
+  - nodes
   verbs:
   - get
   - list
@@ -1398,8 +1380,7 @@ rules:
 - apiGroups:
   - cluster.k8s.io
   resources:
-  - machinesets
-  - machinesets/status
+  - clusters
   verbs:
   - get
   - list
@@ -1412,6 +1393,7 @@ rules:
   - cluster.k8s.io
   resources:
   - machines
+  - machines/status
   verbs:
   - get
   - list
@@ -1421,9 +1403,10 @@ rules:
   - patch
   - delete
 - apiGroups:
-  - ""
+  - cluster.k8s.io
   resources:
-  - nodes
+  - machinedeployments
+  - machinedeployments/status
   verbs:
   - get
   - list
@@ -1435,7 +1418,8 @@ rules:
 - apiGroups:
   - cluster.k8s.io
   resources:
-  - machines
+  - machinesets
+  - machinesets/status
   verbs:
   - get
   - list