diff --git a/etc/cinder/policy.json b/etc/cinder/policy.json
index bcb53c48a2e..47d1cadbdeb 100644
--- a/etc/cinder/policy.json
+++ b/etc/cinder/policy.json
@@ -16,6 +16,7 @@
     "volume:update_volume_admin_metadata": "rule:admin_api",
     "volume:get_snapshot": "rule:admin_or_owner",
     "volume:get_all_snapshots": "rule:admin_or_owner",
+    "volume:create_snapshot": "rule:admin_or_owner",
     "volume:delete_snapshot": "rule:admin_or_owner",
     "volume:update_snapshot": "rule:admin_or_owner",
     "volume:extend": "rule:admin_or_owner",