diff --git a/src/api2/node/status.rs b/src/api2/node/status.rs
index 0daba1e6d..3b966d635 100644
--- a/src/api2/node/status.rs
+++ b/src/api2/node/status.rs
@@ -47,7 +47,7 @@ use crate::config::acl::PRIV_SYS_AUDIT;
         }
     },
     access: {
-        permission: &Permission::Privilege(&[], PRIV_SYS_AUDIT, false),
+        permission: &Permission::Privilege(&["system", "status"], PRIV_SYS_AUDIT, false),
     },
 )]
 /// Read node memory, CPU and (root) disk usage
diff --git a/src/api2/node/tasks.rs b/src/api2/node/tasks.rs
index 79811e205..e8de42fd6 100644
--- a/src/api2/node/tasks.rs
+++ b/src/api2/node/tasks.rs
@@ -70,7 +70,7 @@ use crate::config::acl::{PRIV_SYS_AUDIT, PRIV_SYS_MODIFY};
         },
     },
     access: {
-        permission: &Permission::Privilege(&[], PRIV_SYS_AUDIT, false),
+        permission: &Permission::Privilege(&["system", "tasks"], PRIV_SYS_AUDIT, false),
     },
 )]
 /// Get task status.
@@ -138,7 +138,7 @@ fn extract_upid(param: &Value) -> Result<UPID, Error> {
         },
     },
     access: {
-        permission: &Permission::Privilege(&[], PRIV_SYS_AUDIT, false),
+        permission: &Permission::Privilege(&["system", "tasks"], PRIV_SYS_AUDIT, false),
     },
 )]
 /// Read task log.
@@ -203,7 +203,7 @@ fn read_task_log(
         },
     },
     access: {
-        permission: &Permission::Privilege(&[], PRIV_SYS_MODIFY, false),
+        permission: &Permission::Privilege(&["system", "tasks"], PRIV_SYS_MODIFY, false),
     },
 )]
 /// Try to stop a task.