diff --git a/modules/alicloud/vendor-access/files/access_policy.json.tpl b/modules/alicloud/vendor-access/files/access_policy.json.tpl
index aa3dac9..edc7da7 100644
--- a/modules/alicloud/vendor-access/files/access_policy.json.tpl
+++ b/modules/alicloud/vendor-access/files/access_policy.json.tpl
@@ -142,6 +142,7 @@
         "cs:UpdateTemplate",
         "cs:UpdateUserPermissions",
         "cs:UpgradeCluster",
+        "cs:UpgradeClusterNodepool",
         "cs:UpgradeK8sComponents"
       ],
       "Resource": [