diff --git a/etc/policy.json b/etc/policy.json
index 81fe4955..d21427cb 100644
--- a/etc/policy.json
+++ b/etc/policy.json
@@ -39,6 +39,7 @@
     "update_network:provider:network_type": "rule:admin_only",
     "update_network:provider:physical_network": "rule:admin_only",
     "update_network:provider:segmentation_id": "rule:admin_only",
+    "update_network:router:external": "rule:admin_only",
     "delete_network": "rule:admin_or_owner",
 
     "create_port": "",