diff --git a/_docs/administration/single-sign-on/oidc/oidc-okta.md b/_docs/administration/single-sign-on/oidc/oidc-okta.md
index 3d4b19f4a..8533d2cfe 100644
--- a/_docs/administration/single-sign-on/oidc/oidc-okta.md
+++ b/_docs/administration/single-sign-on/oidc/oidc-okta.md
@@ -120,6 +120,8 @@ caption="API token in Okta to use as Access token"
 max-width="60%"
 %}
 
+> **Note:**
+> The api permission you can use is the built-in Read Only Admin role
   
 {% include image.html 
 lightbox="true"