diff --git a/src/content/docs/fundamentals/setup/manage-members/roles.mdx b/src/content/docs/fundamentals/setup/manage-members/roles.mdx
index f4d2eb54cdff95e..899341c2a9c95b1 100644
--- a/src/content/docs/fundamentals/setup/manage-members/roles.mdx
+++ b/src/content/docs/fundamentals/setup/manage-members/roles.mdx
@@ -51,8 +51,8 @@ Account-scoped roles apply across an entire Cloudflare account, and through all
 | Magic Network Monitoring                                     | Can view and edit [MNM configuration](/magic-network-monitoring/).                                                                                                                                                                                                                                                                                                                                     |
 | Magic Network Monitoring Admin                               | Can view, edit, create, and delete [MNM configuration](/magic-network-monitoring/).                                                                                                                                                                                                                                                                                                                    |
 | Magic Network Monitoring Read-Only                           | Can view [MNM configuration](/magic-network-monitoring/).                                                                                                                                                                                                                                                                                                                                              |
-| Network Services Write (Magic)                               | Grants write access to network configurations for Magic services.                                                                                                                                                                                                                                                                                                                                      |
-| Network Services Read (Magic)                                | Grants read access to network configurations for Magic services.                                                                                                                                                                                                                                                                                                                                       |
+| Network Services Write (Magic)                               | Grants write access to network configurations for Magic services. Magic Tunnel health checks require the Analytics role for non-admin users.                                                                                                                                                                                                                                                                                                                                      |
+| Network Services Read (Magic)                                | Grants read access to network configurations for Magic services. Magic Tunnel health checks require the Analytics role for non-admin users.                                                                                                                                                                                                                                                                                                                                       |
 | Minimal Account Access                                       | Can view account, and nothing else.                                                                                                                                                                                                                                                                                                                                                                    |
 | Page Shield                                                  | Grants write access to [Page Shield](/page-shield/) across the whole account.                                                                                                                                                                                                                                                                                                                          |
 | Page Shield Read                                             | Grants read access to [Page Shield](/page-shield/) across the whole account.                                                                                                                                                                                                                                                                                                                           |