diff --git a/metropolis/proto/ext/authorization.proto b/metropolis/proto/ext/authorization.proto
index 1a0e759..4c27f3e 100644
--- a/metropolis/proto/ext/authorization.proto
+++ b/metropolis/proto/ext/authorization.proto
@@ -28,6 +28,7 @@
     PERMISSION_UPDATE_NODE = 7;
     PERMISSION_DECOMMISSION_NODE = 8;
     PERMISSION_DELETE_NODE = 9;
+    PERMISSION_UPDATE_NODE_LABELS = 10;
 }
 
 // Authorization policy for an RPC method. This message/API does not have the