diff --git a/pkg/cluster/adminupdate_test.go b/pkg/cluster/adminupdate_test.go
index 84e60477db4..e17e9d2f81f 100644
--- a/pkg/cluster/adminupdate_test.go
+++ b/pkg/cluster/adminupdate_test.go
@@ -49,6 +49,7 @@ func TestAdminUpdateSteps(t *testing.T) {
 		"[Action initializeClusterMsiClients]",
 		"[AuthorizationRetryingAction clusterIdentityIDs]",
 		"[AuthorizationRetryingAction platformWorkloadIdentityIDs]",
+		"[AuthorizationRetryingAction persistPlatformWorkloadIdentityIDs]",
 		"[Action fixInfraID]",
 	}
 
diff --git a/pkg/cluster/install.go b/pkg/cluster/install.go
index 32dc0d132ef..5e28e9dd561 100644
--- a/pkg/cluster/install.go
+++ b/pkg/cluster/install.go
@@ -99,6 +99,7 @@ func (m *manager) getZerothSteps() []steps.Step {
 			steps.Action(m.initializeClusterMsiClients),
 			steps.AuthorizationRetryingAction(m.fpAuthorizer, m.clusterIdentityIDs),
 			steps.AuthorizationRetryingAction(m.fpAuthorizer, m.platformWorkloadIdentityIDs),
+			steps.AuthorizationRetryingAction(m.fpAuthorizer, m.persistPlatformWorkloadIdentityIDs),
 		}
 
 		bootstrap = append(bootstrap, managedIdentitySteps...)