diff --git a/.github/workflows/label_community_pr.yml b/.github/workflows/label_community_pr.yml
index 6ae9322c4bf4..eb461bb6c55a 100644
--- a/.github/workflows/label_community_pr.yml
+++ b/.github/workflows/label_community_pr.yml
@@ -3,6 +3,9 @@ name: Label Community PR
 on:
   pull_request:
     types: [opened]
+permissions:
+  pull-requests: write
+  members: read
 
 jobs:
   label_pr: