diff --git a/test/infra/managed/namespaces/secretmanager-csi-build/iam-policy.yaml b/test/infra/managed/namespaces/secretmanager-csi-build/iam-policy.yaml
index 89bf72d..84ee727 100644
--- a/test/infra/managed/namespaces/secretmanager-csi-build/iam-policy.yaml
+++ b/test/infra/managed/namespaces/secretmanager-csi-build/iam-policy.yaml
@@ -35,6 +35,9 @@ spec:
     - members:
         - serviceAccount:gh-e2e-runner@secretmanager-csi-build.iam.gserviceaccount.com
       role: roles/viewer
+    - members:
+        - service-735463103342@gcp-sa-artifactregistry.iam.gserviceaccount.com
+      role: roles/storage.objectViewer
     # cnrm controller permissions (manage all test/infra/managed resources)
     - members:
         - serviceAccount:cnrm-system@secretmanager-csi-build.iam.gserviceaccount.com