diff --git a/openstack_dashboard/dashboards/project/networks/ports/extensions/allowed_address_pairs/tables.py b/openstack_dashboard/dashboards/project/networks/ports/extensions/allowed_address_pairs/tables.py
index 461f97772d..2b609edb9d 100644
--- a/openstack_dashboard/dashboards/project/networks/ports/extensions/allowed_address_pairs/tables.py
+++ b/openstack_dashboard/dashboards/project/networks/ports/extensions/allowed_address_pairs/tables.py
@@ -36,7 +36,10 @@ class AddAllowedAddressPair(policy.PolicyTargetMixin, tables.LinkAction):
     url = "horizon:project:networks:ports:addallowedaddresspairs"
     classes = ("ajax-modal",)
     icon = "plus"
-    policy_rules = (("network", "update_port"),)
+    policy_rules = (
+        ("network", "update_port"),
+        ("network", "update_port:allowed_address_pairs"),
+    )
 
     def get_link_url(self, port=None):
         if port:
@@ -62,6 +65,11 @@ class DeleteAllowedAddressPair(tables.DeleteAction):
             count
         )
 
+    policy_rules = (
+        ("network", "update_port"),
+        ("network", "update_port:allowed_address_pairs"),
+    )
+
     def delete(self, request, ip_address):
         try:
             port_id = self.table.kwargs['port_id']