diff --git a/apps/edr-passenger-api/src/modules/payments/payments.controller.ts b/apps/edr-passenger-api/src/modules/payments/payments.controller.ts
index 158eacfc7..52640c201 100644
--- a/apps/edr-passenger-api/src/modules/payments/payments.controller.ts
+++ b/apps/edr-passenger-api/src/modules/payments/payments.controller.ts
@@ -218,17 +218,14 @@ export class PaymentsController {
   }
 
   @Post(":bookingId/force-confirm")
-  @PassengerStaff([
-    PASSENGER_PERMS.payments.manage,
-    PASSENGER_PERMS.payments.manageMethods,
-    PASSENGER_PERMS.admin,
-  ])
+  @PassengerStaff([PASSENGER_PERMS.tickets.generate, PASSENGER_PERMS.admin])
   @ApiBearerAuth("IAM-auth")
   @ApiOperation({
-    summary: "Force-confirm payment & generate ticket (back-office only)",
+    summary: "Force-confirm payment & generate ticket (ticket-generate permission)",
     description:
       "Marks the payment as SUCCEEDED, confirms the booking, and generates the ticket. " +
-      "Use when a vendor payment completed but the webhook was never delivered. Idempotent.",
+      "Use when a vendor payment completed but the webhook was never delivered. Idempotent. " +
+      "Requires `edr_passenger_app:tickets:generate` (admins bypass).",
   })
   forceConfirm(
     @Param("bookingId") bookingId: string,