user permission limitations

Author: patriciasantaana

src/content/docs/analytics/network-analytics/get-started.mdx

@@ -29,3 +29,7 @@ Use the [GraphQL Analytics API](/analytics/graphql-api/) to query data using the
 ## Send Network Analytics logs to a third-party service
 
 [Create a Logpush job](/logs/get-started/enable-destinations/) that sends Network analytics logs to your storage service, <GlossaryTooltip term="SIEM">SIEM solution</GlossaryTooltip>, or log management provider.
+
+## Limitations
+
+Users with the `Analytics` role will have visibility to IDs but will not see tunnel names, prefix names, [Magic Firewall](/magic-firewall/) rules, and [DDoS managed rulesets](/ddos-protection/managed-rulesets/) or override names on the Network Analytics dashboard.