diff --git a/.github/workflows/template_automerge_dependabot.yml b/.github/workflows/template_automerge_dependabot.yml
index 0cf154ab..5dffcb49 100644
--- a/.github/workflows/template_automerge_dependabot.yml
+++ b/.github/workflows/template_automerge_dependabot.yml
@@ -4,10 +4,6 @@ name: Dependabot Auto-Merge
 on:
   workflow_call:
 
-permissions:
-  contents: write
-  pull-requests: write
-
 jobs:
   dependabot:
 
diff --git a/README.md b/README.md
index 2aa5b8a0..03fa7ad1 100644
--- a/README.md
+++ b/README.md
@@ -33,6 +33,10 @@ name: Enable Dependabot Auto-Merge
 
 on: pull_request
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   dependabot:
     uses: Staffbase/gha-workflows/.github/workflows/template_automerge_dependabot.yml@v2.8.0