diff --git a/pkg/probo/actions.go b/pkg/probo/actions.go
index f9ceefdb8..b6119ae37 100644
--- a/pkg/probo/actions.go
+++ b/pkg/probo/actions.go
@@ -391,6 +391,8 @@ const (
 	ActionCookieBannerActivate   = "core:cookie-banner:activate"
 	ActionCookieBannerDeactivate = "core:cookie-banner:deactivate"
 
+	ActionCookieBannerRegeneratePolicy = "core:cookie-banner:regenerate-policy"
+
 	// CookieBannerVersion actions
 	ActionCookieBannerVersionGet     = "core:cookie-banner-version:get"
 	ActionCookieBannerVersionList    = "core:cookie-banner-version:list"
diff --git a/pkg/server/api/console/v1/cookie_banner_resolvers.go b/pkg/server/api/console/v1/cookie_banner_resolvers.go
index 3eb06a62b..b35c6dc87 100644
--- a/pkg/server/api/console/v1/cookie_banner_resolvers.go
+++ b/pkg/server/api/console/v1/cookie_banner_resolvers.go
@@ -779,7 +779,7 @@ func (r *mutationResolver) PublishCookieBannerVersion(ctx context.Context, input
 
 // RegenerateCookieBannerTrackerPolicy is the resolver for the regenerateCookieBannerTrackerPolicy field.
 func (r *mutationResolver) RegenerateCookieBannerTrackerPolicy(ctx context.Context, input types.RegenerateCookieBannerTrackerPolicyInput) (*types.RegenerateCookieBannerTrackerPolicyPayload, error) {
-	scope, err := r.authorize(ctx, input.CookieBannerID, probo.ActionCookieBannerUpdate)
+	scope, err := r.authorize(ctx, input.CookieBannerID, probo.ActionCookieBannerRegeneratePolicy)
 	if err != nil {
 		return nil, err
 	}
diff --git a/pkg/server/api/mcp/v1/schema.resolvers.go b/pkg/server/api/mcp/v1/schema.resolvers.go
index c779105c2..61379d735 100644
--- a/pkg/server/api/mcp/v1/schema.resolvers.go
+++ b/pkg/server/api/mcp/v1/schema.resolvers.go
@@ -5826,7 +5826,7 @@ func (r *Resolver) PublishCookieBannerVersionTool(ctx context.Context, req *mcp.
 }
 
 func (r *Resolver) RegenerateCookieBannerTrackerPolicyTool(ctx context.Context, req *mcp.CallToolRequest, input *types.RegenerateCookieBannerTrackerPolicyInput) (*mcp.CallToolResult, types.RegenerateCookieBannerTrackerPolicyOutput, error) {
-	scope, err := r.Authorize(ctx, input.CookieBannerID, probo.ActionCookieBannerUpdate)
+	scope, err := r.Authorize(ctx, input.CookieBannerID, probo.ActionCookieBannerRegeneratePolicy)
 	if err != nil {
 		return nil, types.RegenerateCookieBannerTrackerPolicyOutput{}, err
 	}