diff --git a/config/internal/apiserver/role_ds-pipeline-user-access.yaml.tmpl b/config/internal/apiserver/role_ds-pipeline-user-access.yaml.tmpl
new file mode 100644
index 000000000..623280ccb
--- /dev/null
+++ b/config/internal/apiserver/role_ds-pipeline-user-access.yaml.tmpl
@@ -0,0 +1,15 @@
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: ds-pipeline-user-access-{{.Name}}
+  namespace: {{.Namespace}}
+  labels:
+    app: ds-pipeline-{{.Name}}
+    component: data-science-pipelines
+rules:
+- apiGroups:
+  - route.openshift.io
+  resources:
+  - routes
+  verbs:
+  - get
diff --git a/controllers/apiserver.go b/controllers/apiserver.go
index 7f0a7b53f..1971b0e67 100644
--- a/controllers/apiserver.go
+++ b/controllers/apiserver.go
@@ -28,6 +28,7 @@ var apiServerTemplates = []string{
 	"apiserver/artifact_script.yaml.tmpl",
 	"apiserver/role_ds-pipeline.yaml.tmpl",
 	"apiserver/role_pipeline-runner.yaml.tmpl",
+	"apiserver/role_ds-pipeline-user-access.yaml.tmpl",
 	"apiserver/rolebinding_ds-pipeline.yaml.tmpl",
 	"apiserver/rolebinding_pipeline-runner.yaml.tmpl",
 	"apiserver/sa_ds-pipeline.yaml.tmpl",