diff --git a/docs/en/enterprise-edition/content-collections/application-security/manage-network-tunnel/manage-network-tunnel.adoc b/docs/en/enterprise-edition/content-collections/application-security/manage-network-tunnel/manage-network-tunnel.adoc
index 62b85b1847..fda043e8c5 100644
--- a/docs/en/enterprise-edition/content-collections/application-security/manage-network-tunnel/manage-network-tunnel.adoc
+++ b/docs/en/enterprise-edition/content-collections/application-security/manage-network-tunnel/manage-network-tunnel.adoc
@@ -18,7 +18,7 @@ Before deploying the Transporter, fulfill the following requirements.
 
 NOTE: These requirements apply to both Docker and Kubernetes setups. Requirements specific to Docker or Kubernetes setups are specified in the relevant documentation.
 
-* *Permissions*: The least possible user privileges or System Administrator privileges if using a https://docs.prismacloud.io/en/enterprise-edition/content-collections/administration/add-service-account-prisma-cloud[Service Account token (Key/Secret)]
+* *Permissions*: The least possible user privileges. Note that when using a https://docs.prismacloud.io/en/enterprise-edition/content-collections/administration/add-service-account-prisma-cloud[Service Account token (Key/Secret)], you will need System Administrator to create the token, but the token itself should be restricted to the bare minimum functionality
 //The least possible privileges are required by the user or Prisma Cloud Service Account API Key/Secrets deploying the Transporter  
 
 * *Select a Deployment Method*: Choose between deploying the Transporter as a *Docker Container* or as a *Kubernetes* service