diff --git a/src/Appwrite/Platform/Modules/Databases/Http/Databases/Transactions/Operations/Create.php b/src/Appwrite/Platform/Modules/Databases/Http/Databases/Transactions/Operations/Create.php
index 0aca3e3f7c..20cf79551c 100644
--- a/src/Appwrite/Platform/Modules/Databases/Http/Databases/Transactions/Operations/Create.php
+++ b/src/Appwrite/Platform/Modules/Databases/Http/Databases/Transactions/Operations/Create.php
@@ -87,6 +87,7 @@ class Create extends Action
             if (!$isAPIKey && !$isPrivilegedUser && \in_array($operation['action'], [
                 'bulkCreate',
                 'bulkUpdate',
+                'bulkUpsert',
                 'bulkDelete'
             ])) {
                 throw new Exception(Exception::USER_UNAUTHORIZED);