diff --git a/changelog/unreleased/extend-service-account-permissions-2.md b/changelog/unreleased/extend-service-account-permissions-2.md
new file mode 100644
index 0000000000..adc60f1b5f
--- /dev/null
+++ b/changelog/unreleased/extend-service-account-permissions-2.md
@@ -0,0 +1,5 @@
+Enhancement: Extend service account permissions
+
+Adds AddGrant permisson
+
+https://github.com/cs3org/reva/pull/4701
diff --git a/pkg/storage/utils/decomposedfs/node/permissions.go b/pkg/storage/utils/decomposedfs/node/permissions.go
index 4e3459a946..d15f28ffbd 100644
--- a/pkg/storage/utils/decomposedfs/node/permissions.go
+++ b/pkg/storage/utils/decomposedfs/node/permissions.go
@@ -100,6 +100,7 @@ func ServiceAccountPermissions() provider.ResourcePermissions {
 		RestoreRecycleItem:   true, // for cli restore command
 		Delete:               true, // for cli restore command with replace option
 		CreateContainer:      true, // for space provisioning
+		AddGrant:             true, // for initial project space member assignment
 	}
 }