diff --git a/examples/rbac/nginx/README.md b/examples/rbac/nginx/README.md
index ef910e07c..478a2f24e 100644
--- a/examples/rbac/nginx/README.md
+++ b/examples/rbac/nginx/README.md
@@ -38,7 +38,8 @@ granted to the ClusterRole named `nginx-ingress-clusterrole`
 
 * `configmaps`, `endpoints`, `nodes`, `pods`, `secrets`: list, watch
 * `nodes`: get
-* `services`, `ingresses`: get, list, watch
+* `services`: get, list, watch, update (update permission only required when using named ports)
+* `ingresses`: get, list, watch
 * `events`: create, patch
 * `ingresses/status`: update
 
diff --git a/examples/rbac/nginx/nginx-ingress-controller-rbac.yml b/examples/rbac/nginx/nginx-ingress-controller-rbac.yml
index 64561f375..2b550ed18 100644
--- a/examples/rbac/nginx/nginx-ingress-controller-rbac.yml
+++ b/examples/rbac/nginx/nginx-ingress-controller-rbac.yml
@@ -38,6 +38,7 @@ rules:
     verbs:
       - get
       - list
+      - update
       - watch
   - apiGroups:
       - "extensions"