diff --git a/terraform/hcp_iam.tf b/terraform/hcp_iam.tf
index 0c04085..5ca7ae0 100644
--- a/terraform/hcp_iam.tf
+++ b/terraform/hcp_iam.tf
@@ -181,6 +181,8 @@ data "aws_iam_policy_document" "hcptf_scoped_iam" {
     effect = "Allow"
     actions = [
       "iam:AttachRolePolicy",
+      "iam:CreateRole",
+      "iam:DeleteRole",
       "iam:DeleteRolePolicy",
       "iam:DetachRolePolicy",
       "iam:PutRolePolicy",