diff --git a/metropolis/proto/ext/authorization.proto b/metropolis/proto/ext/authorization.proto
index e526ec3..81de8bd 100644
--- a/metropolis/proto/ext/authorization.proto
+++ b/metropolis/proto/ext/authorization.proto
@@ -30,6 +30,7 @@
     PERMISSION_DELETE_NODE = 9;
     PERMISSION_UPDATE_NODE_LABELS = 10;
     PERMISSION_NODE_POWER_MANAGEMENT = 11;
+    PERMISSION_CONFIGURE_CLUSTER = 12;
 }
 
 // Authorization policy for an RPC method. This message/API does not have the