diff --git a/examples/README.md b/examples/README.md
index b0cb5497b..ea8d8c0ac 100644
--- a/examples/README.md
+++ b/examples/README.md
@@ -88,3 +88,9 @@ Name | Description | Platform   | Complexity Level
 -----| ----------- | ---------- | ----------------
 custom-headers  | set custom headers before send traffic to backends  | nginx | Advanced
 configuration-snippets | customize nginx location configuration using annotations | nginx | Advanced
+
+## RBAC
+
+Name | Description | Platform   | Complexity Level
+-----| ----------- | ---------- | ----------------
+rbac | Configuring Role Base Access Control | nginx | intermediate
diff --git a/examples/rbac/nginx/README.md b/examples/rbac/nginx/README.md
index 67f24c104..7a0249221 100644
--- a/examples/rbac/nginx/README.md
+++ b/examples/rbac/nginx/README.md
@@ -37,7 +37,7 @@ able to function as an ingress across the cluster.  These permissions are
 granted to the ClusterRole named `nginx-ingress-clusterrole`
 
 * `configmaps`, `endpoints`, `nodes`, `pods`, `secrets`: list, watch
-* `services`: get, list, watch, update
+* `services`: get, list, watch
 * `ingresses`: get, list, watch
 * `events`: create
 * `ingresses/status`: update
diff --git a/examples/rbac/nginx/nginx-ingress-controller-rbac.yml b/examples/rbac/nginx/nginx-ingress-controller-rbac.yml
index d5da51545..f8f31f0b7 100644
--- a/examples/rbac/nginx/nginx-ingress-controller-rbac.yml
+++ b/examples/rbac/nginx/nginx-ingress-controller-rbac.yml
@@ -16,7 +16,6 @@ metadata:
 rules:
   - apiGroups:
       - ""
-      - "extensions"
     resources:
       - configmaps
       - secrets
@@ -34,7 +33,6 @@ rules:
       - get
       - list
       - watch
-      - update
   - apiGroups:
       - "extensions"
     resources: