diff --git a/enrol/authorize/db/access.php b/enrol/authorize/db/access.php
index de6dc5796cd..53419632810 100644
--- a/enrol/authorize/db/access.php
+++ b/enrol/authorize/db/access.php
@@ -8,6 +8,15 @@ $enrol_authorize_capabilities = array(
         'legacy' => array(
             'admin' => CAP_ALLOW
         )
+    ),
+
+    'enrol/authorize:uploadcsv' => array(
+        'riskbitmask' => RISK_XSS,
+        'captype' => 'write',
+        'contextlevel' => CONTEXT_USER,
+        'legacy' => array(
+            'admin' => CAP_ALLOW
+        )
     )
 
 );