diff --git a/rbac-fix/ceph.yaml b/rbac-fix/ceph.yaml
new file mode 100644
index 0000000..44c4e06
--- /dev/null
+++ b/rbac-fix/ceph.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+  name: rook-ceph-rook-ceph-system:cluster-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: rook-ceph-system
+  namespace: rook-ceph
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+  name: ceph-lcm-mirantis-ceph-operator-account:cluster-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: ceph-operator-account
+  namespace: ceph-lcm-mirantis
diff --git a/rbac-fix/pv.yaml b/rbac-fix/pv.yaml
new file mode 100644
index 0000000..8f82272
--- /dev/null
+++ b/rbac-fix/pv.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+  name: osh-system-local-storage-admin:cluster-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: local-storage-admin
+  namespace: osh-system