diff --git a/inventory/views.py b/inventory/views.py
index cf120429..8078e98d 100644
--- a/inventory/views.py
+++ b/inventory/views.py
@@ -6224,6 +6224,7 @@ class OpportunityListView(LoginRequiredMixin, ListView):
     template_name = "crm/opportunities/opportunity_list.html"
     context_object_name = "opportunities"
     paginate_by = 30
+    permission_required = ["inventory.view_opportunity"]
 
     def get_queryset(self):
         dealer = get_user_type(self.request)
diff --git a/templates/crm/opportunities/opportunity_list.html b/templates/crm/opportunities/opportunity_list.html
index fd00c753..5e9a9e69 100644
--- a/templates/crm/opportunities/opportunity_list.html
+++ b/templates/crm/opportunities/opportunity_list.html
@@ -77,12 +77,13 @@
             </div>
           </div>
         </div>
-
+        {% if perms.inventory.add_opportunity %}
         <div class="d-flex justify-content-end">
           <a class="btn btn-phoenix-primary btn-sm" href="{% url 'opportunity_create' request.dealer.slug %}">
             <span class="fas fa-plus me-2"></span>{{ _("Add Opportunity") }}
           </a>
         </div>
+        {% endif %}
       </div>
     </div>
   </div>