diff --git a/src/content/docs/cloudflare-one/connections/connect-networks/get-started/create-local-tunnel.mdx b/src/content/docs/cloudflare-one/connections/connect-networks/get-started/create-local-tunnel.mdx
index 4932292c38fb69a..e0cba75847f5cc8 100644
--- a/src/content/docs/cloudflare-one/connections/connect-networks/get-started/create-local-tunnel.mdx
+++ b/src/content/docs/cloudflare-one/connections/connect-networks/get-started/create-local-tunnel.mdx
@@ -98,6 +98,14 @@ mv /root/cloudflared/cloudflared /usr/bin/cloudflared
 
 ## 2. Authenticate `cloudflared`
 
+Minnimum user permissions needed:
+- Account Scoped Roles > Cloudflare Zero Trust
+- Account Scoped Roles > SSL/TLS, Caching, Performance, Page Rules, and Customization
+- Account Scoped Roles > Load Balancer
+
+Additional permissions needed for **cloudflared tunnel route dns** commands:
+- Account Scoped Roles > DNS
+
 ```sh
 cloudflared tunnel login
 ```