diff --git a/src/accesscontrol.js b/src/accesscontrol.js
index 06534c744..0fac85b50 100644
--- a/src/accesscontrol.js
+++ b/src/accesscontrol.js
@@ -31,7 +31,7 @@ function validatePermissions(permissions) {
     if (permissions.length === 1 && permissions[0] === exports.PERMISSION_MANAGE_USERS) return null;
 
     // here for completeness
-    if (permissions.includes(exports.PERMISSSION_ADMIN)) return new BoxError(BoxError.BAD_FIELD, 'admin is not a permission');
+    if (permissions.includes(exports.PERMISSION_ADMIN)) return new BoxError(BoxError.BAD_FIELD, 'admin is not a permission');
 
     return new BoxError(BoxError.BAD_FIELD, 'Invalid permissions');
 }