diff --git a/src/content/docs/analytics/network-analytics/get-started.mdx b/src/content/docs/analytics/network-analytics/get-started.mdx
index 4a44fc4ffb7b8f..29525fefd23cd0 100644
--- a/src/content/docs/analytics/network-analytics/get-started.mdx
+++ b/src/content/docs/analytics/network-analytics/get-started.mdx
@@ -29,3 +29,13 @@ Use the [GraphQL Analytics API](/analytics/graphql-api/) to query data using the
 ## Send Network Analytics logs to a third-party service
 
 [Create a Logpush job](/logs/get-started/enable-destinations/) that sends Network analytics logs to your storage service, <GlossaryTooltip term="SIEM">SIEM solution</GlossaryTooltip>, or log management provider.
+
+## Limitations
+
+Users with the `Analytics` role will have visibility to IDs but will not see the following on the Network Analytics dashboard:
+
+- Tunnel names
+- Prefix names
+- [Magic Firewall](/magic-firewall/) rules
+- [DDoS managed rulesets](/ddos-protection/managed-rulesets/)
+- Override names
\ No newline at end of file