diff --git a/.github/workflows/orchestrator.yml b/.github/workflows/orchestrator.yml
index 66bdb49233..f5747ee725 100644
--- a/.github/workflows/orchestrator.yml
+++ b/.github/workflows/orchestrator.yml
@@ -23,6 +23,7 @@ permissions:
   models: 'read'
   pages: 'read'
   repository-projects: 'read'
+  id-token: 'write'
 
 concurrency:
   group: '${{ github.workflow }}-${{ github.head_ref || github.ref }}'