diff --git a/etc/policy.json b/etc/policy.json
index 922657b2..369e0a80 100644
--- a/etc/policy.json
+++ b/etc/policy.json
@@ -70,6 +70,7 @@
     "create_firewall:shared": "rule:admin_only",
     "get_firewall:shared": "rule:admin_only",
     "update_firewall": "rule:admin_or_owner",
+    "update_firewall:shared": "rule:admin_only",
     "delete_firewall": "rule:admin_or_owner",
 
     "create_firewall_policy": "",