diff --git a/app/controllers/projects/cycle_analytics_controller.rb b/app/controllers/projects/cycle_analytics_controller.rb
index 002a71b593dfec11a52d9c97c4a83d7b1a6bca11..68cc79fb16636c82ae04939a245394948163de66 100644
--- a/app/controllers/projects/cycle_analytics_controller.rb
+++ b/app/controllers/projects/cycle_analytics_controller.rb
@@ -1,4 +1,6 @@
 class Projects::CycleAnalyticsController < Projects::ApplicationController
+  before_action :authorize_read_cycle_analytics!
+
   def show
     @cycle_analytics = CycleAnalytics.new(@project, from: parse_start_date)
   end
diff --git a/app/models/ability.rb b/app/models/ability.rb
index a49dd7039262df49d81f84d6a7f97837c1458728..5293be33e5a330ba8c626156844aba709b13c4d5 100644
--- a/app/models/ability.rb
+++ b/app/models/ability.rb
@@ -265,7 +265,8 @@ class Ability
         :read_container_image,
         :read_pipeline,
         :read_environment,
-        :read_deployment
+        :read_deployment,
+        :read_cycle_analytics
       ]
     end