diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
index 66bbd02..b29226e 100644
--- a/config/rbac/role.yaml
+++ b/config/rbac/role.yaml
@@ -22,6 +22,13 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - events.k8s.io
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
 - apiGroups:
   - infrastructure.cluster.x-k8s.io
   resources:
diff --git a/controller/stackitcluster_controller.go b/controller/stackitcluster_controller.go
index a7eaa81..2c4be47 100644
--- a/controller/stackitcluster_controller.go
+++ b/controller/stackitcluster_controller.go
@@ -57,7 +57,8 @@ type StackitClusterReconciler struct {
 // +kubebuilder:rbac:groups=cluster.x-k8s.io,resources=machines,verbs=get;list;watch
 // +kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch
 // +kubebuilder:rbac:groups="",resources=configmaps,verbs=get;list;watch
-// +kubebuilder:rbac:groups="",resources=events,verbs=create;patch
+// +kubebuilder:rbac:groups=events.k8s.io,resources=events,verbs=create;patch
+
 func (r *StackitClusterReconciler) Reconcile(ctx context.Context, req ctrl.Request) (_ ctrl.Result, err error) {
 	log := logf.FromContext(ctx)
 
diff --git a/controller/stackitmachine_controller.go b/controller/stackitmachine_controller.go
index d1aa1d1..cc91f21 100644
--- a/controller/stackitmachine_controller.go
+++ b/controller/stackitmachine_controller.go
@@ -54,7 +54,8 @@ type StackitMachineReconciler struct {
 // +kubebuilder:rbac:groups=cluster.x-k8s.io,resources=clusters,verbs=get;list;watch
 // +kubebuilder:rbac:groups=cluster.x-k8s.io,resources=machines,verbs=get;list;watch
 // +kubebuilder:rbac:groups="",resources=secrets,verbs=get;list;watch
-// +kubebuilder:rbac:groups="",resources=events,verbs=create;patch
+// +kubebuilder:rbac:groups=events.k8s.io,resources=events,verbs=create;patch
+
 func (r *StackitMachineReconciler) Reconcile(ctx context.Context, req ctrl.Request) (_ ctrl.Result, err error) {
 	log := logf.FromContext(ctx)