diff --git a/awx/api/views.py b/awx/api/views.py
index a9cca93d1d..84e13a5fae 100644
--- a/awx/api/views.py
+++ b/awx/api/views.py
@@ -1225,7 +1225,7 @@ class CredentialList(ListCreateAPIView):
             organization = Organization.objects.get(pk=request.data['organization'])
             obj = organization
 
-        if not self.request.user.can_access(type(obj), 'admin', obj, request.data):
+        if not self.request.user.can_access(type(obj), 'change', obj, request.data):
             raise PermissionDenied()
 
         ret = super(CredentialList, self).post(request, *args, **kwargs)