diff --git a/src/RecoveryServices/RecoveryServices.Backup.ServiceClientAdapter/BMSAPIs/VaultAPIs.cs b/src/RecoveryServices/RecoveryServices.Backup.ServiceClientAdapter/BMSAPIs/VaultAPIs.cs
index 9dfcef069691..e22fd636403e 100644
--- a/src/RecoveryServices/RecoveryServices.Backup.ServiceClientAdapter/BMSAPIs/VaultAPIs.cs
+++ b/src/RecoveryServices/RecoveryServices.Backup.ServiceClientAdapter/BMSAPIs/VaultAPIs.cs
@@ -187,7 +187,7 @@ public Vault UpdateRSVault(string resourceGroupName, string vaultName, PatchVaul
                 if (resourceGuardMapping != null && resourceGuardMapping.Count != 0)
                 {
                     // todo: CMK_MUA - check the op value correctly
-                    string criticalOp = "Microsoft.RecoveryServices/vaults/write#reduceImmutabilityState";
+                    string criticalOp = "Microsoft.RecoveryServices/vaults/write#modifyEncryptionSettings";
 
                     foreach (ResourceGuardOperationDetail operationDetail in resourceGuardMapping[0].Properties.ResourceGuardOperationDetails)
                     {