diff --git a/bulut/files/usr/share/rpcd/acl.d/bulut.json b/bulut/files/usr/share/rpcd/acl.d/bulut.json
new file mode 100644
index 0000000000000000000000000000000000000000..3fdace6ee305674d1e70d2a5ba4163de6a6af85d
--- /dev/null
+++ b/bulut/files/usr/share/rpcd/acl.d/bulut.json
@@ -0,0 +1,25 @@
+{
+	"bulut": {
+		"description": "Access controls for bulut requests",
+		"read": {
+			"ubus": {
+				"router.network": [
+					"clients"
+				],
+				"wifix": [
+					"radios",
+					"stas"
+				],
+				"wifi.cntlr": [
+					"status"
+				],
+				"router.system": [
+					"info"
+				],
+				"router.graph": [
+					"load"
+				]
+			}
+		}
+	}
+}