diff --git a/src/v/kafka/server/handlers/client_quotas.cc b/src/v/kafka/server/handlers/client_quotas.cc
index 43e208769dda8..096e6dc650486 100644
--- a/src/v/kafka/server/handlers/client_quotas.cc
+++ b/src/v/kafka/server/handlers/client_quotas.cc
@@ -425,7 +425,7 @@ ss::future<response_ptr> alter_client_quotas_handler::handle(
     }
 
     if (!ctx.authorized(
-          security::acl_operation::describe_configs,
+          security::acl_operation::alter_configs,
           security::default_cluster_name)) {
         for (auto& entry : response.data.entries) {
             entry.error_code = error_code::cluster_authorization_failed;