diff --git a/etc/cinder/policy.json b/etc/cinder/policy.json
index 461ba7be548..1969f53613b 100644
--- a/etc/cinder/policy.json
+++ b/etc/cinder/policy.json
@@ -53,6 +53,7 @@
     "volume_extension:volume_admin_actions:migrate_volume_completion": "rule:admin_api",
 
     "volume_extension:volume_actions:upload_public": "rule:admin_api",
+    "volume_extension:volume_actions:upload_image": "rule:admin_or_owner",
 
     "volume_extension:volume_host_attribute": "rule:admin_api",
     "volume_extension:volume_tenant_attribute": "rule:admin_or_owner",