diff --git a/etc/policy/keystone_default_roles-policy.yaml b/etc/policy/keystone_default_roles-policy.yaml
index e64ad7444b..6b8ec283b8 100644
--- a/etc/policy/keystone_default_roles-policy.yaml
+++ b/etc/policy/keystone_default_roles-policy.yaml
@@ -9,7 +9,7 @@
 
 # Role Rules
 "system_admin": "role:admin"
-"system_reader": "role:reader"
+"system_reader": "role:admin"
 "project_reader": "role:reader and project_id:%(project_id)s"
 "project_member": "role:member and project_id:%(project_id)s"