diff --git a/quickstart/201-aks-acr-identity/azuread.tf b/quickstart/201-aks-acr-identity/azuread.tf
index 2e94e968..28d463f5 100644
--- a/quickstart/201-aks-acr-identity/azuread.tf
+++ b/quickstart/201-aks-acr-identity/azuread.tf
@@ -25,6 +25,6 @@ resource "azurerm_role_assignment" "aks_network" {
 
 resource "azurerm_role_assignment" "aks_acr" {
   scope                = "${data.azurerm_subscription.current.id}/resourceGroups/${azurerm_resource_group.default.name}/providers/Microsoft.ContainerRegistry/registries/${azurerm_container_registry.default.name}"
-  role_definition_name = "Reader"
+  role_definition_name = "AcrPull"
   principal_id         = "${azuread_service_principal.default.id}"
-}
\ No newline at end of file
+}