diff --git a/.github/workflows/autorelease.yml b/.github/workflows/autorelease.yml
index 5cc6a98d3..4dcbba8cd 100644
--- a/.github/workflows/autorelease.yml
+++ b/.github/workflows/autorelease.yml
@@ -9,14 +9,17 @@ on:
   pull_request:
     types: [closed]
     branches: [master]
-
-permissions: read-all|write-all
     
 jobs:
   # This workflow contains a single job called "build"
   build:
     # The type of runner that the job will run on
     runs-on: ubuntu-latest
+    
+    permissions:
+      contents: write
+      deployments: write
+      pull-requests: read
 
     # Only run on merged PRs with an appropriate label.
     if: |