cannot list resource "certificatesigningrequests" in API group "certificates.k8s.io" at the cluster scope

I've created a role and rolebinding. While i was trying to get the information of Deployments i was getting an error like following :

E0831 08:14:08.698149       1 reflector.go:156] pkg/mod/k8s.io/client-go@v0.0.0-20191109102209-3c0d1af94be5/tools/cache/reflector.go:108: Failed to list *v1beta1.CertificateSigningRequest: certificatesigningrequests.certificates.k8s.io is forbidden: User "system:serviceaccount:kube-system:kube-state-metrics" cannot list resource "certificatesigningrequests" in API group "certificates.k8s.io" at the cluster scope

After Checking for few minutes, i got that "kube-state-metrics" is not having required privileges to query "certificatesigningrequests". I'm listing the role, so it can helpful for someone. 

- apiGroups:
  - certificates.k8s.io
  resources:
  - certificatesigningrequests
  verbs: ["list", "watch"]