diff --git a/.github/workflows/re-draft-on-changes-requested.yml b/.github/workflows/re-draft-on-changes-requested.yml
index 79894c27deca40..cf7ffd659cba41 100644
--- a/.github/workflows/re-draft-on-changes-requested.yml
+++ b/.github/workflows/re-draft-on-changes-requested.yml
@@ -11,6 +11,7 @@ permissions:
   contents: write
   issues: write
   pull-requests: write
+  statuses: write
 
 jobs:
   approved:
@@ -24,13 +25,14 @@ jobs:
       contents: write
       issues: write
       pull-requests: write
+      statuses: write
     runs-on: ubuntu-latest
     steps:
       - run: echo "This PR was rejected"
       - name: Convert PR to draft when changes are requested
         uses: actions/github-script@v7
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.GH_ACCESS_TOKEN }}
           script: |
             async function getPullRequestId() {
               const pull_number = context.payload.pull_request.number;