diff --git a/.github/workflows/genai-commander.yml b/.github/workflows/genai-commander.yml
index d1339c244e..9c3b106033 100644
--- a/.github/workflows/genai-commander.yml
+++ b/.github/workflows/genai-commander.yml
@@ -23,6 +23,8 @@ jobs:
                       username
                     });
                     console.log(`Permissions for ${username}:`, permissions.data);
+                    if (!permissions.data.user.permissions.triage)
+                      throw "comment author does not have triage permissions";
             - name: resolve pr sha
               id: sha
               uses: actions/github-script@v4