diff --git a/phoenix/rbac.yaml b/phoenix/rbac.yaml
index e9fa6dc..df56ffc 100644
--- a/phoenix/rbac.yaml
+++ b/phoenix/rbac.yaml
@@ -10,12 +10,14 @@ metadata:
   name: phoenix-role
   namespace: web
 rules:
-- apiGroups: [""]
-  resources: ["*"]
-  verbs: ["get", "watch", "list"]
-- apiGroups: ["apps"]
-  resources: ["*"]
-  verbs: ["get", "watch", "list"]
+- apiGroups:
+  - "apps"
+  resources:
+  - deployments
+  resourceNames:
+  - phoenix-app
+  verbs:
+  - get
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding