diff --git a/src/assets/images/changelog/fundamentals/2025-10-01-fine-grained-permissioning-ux.png b/src/assets/images/changelog/fundamentals/2025-10-01-fine-grained-permissioning-ux.png
new file mode 100644
index 000000000000000..9c26c28ed6153b5
Binary files /dev/null and b/src/assets/images/changelog/fundamentals/2025-10-01-fine-grained-permissioning-ux.png differ
diff --git a/src/content/changelog/fundamentals/2025-10-01-fine-grained-permissioning-beta.mdx b/src/content/changelog/fundamentals/2025-10-01-fine-grained-permissioning-beta.mdx
new file mode 100644
index 000000000000000..b378e17784e52a8
--- /dev/null
+++ b/src/content/changelog/fundamentals/2025-10-01-fine-grained-permissioning-beta.mdx
@@ -0,0 +1,32 @@
+---
+title: Fine-grained Permissioning for Access for Apps, IdPs, & Targets now in Public Beta
+description: Expanding Role-Based-Access-Control with resource-level controls in Cloudflare Zero Trust.
+products:
+  - fundamentals
+date: 2025-10-02
+---
+
+import { Aside } from '@astrojs/starlight/components';
+
+
+Fine-grained permissions for **Access Applications, Identity Providers (IdPs), and Targets** is now available in Public Beta. This expands our RBAC model beyond account & zone-scoped roles, enabling administrators to grant permissions scoped to individual resources.
+
+### What's New
+- **[Access Applications](https://developers.cloudflare.com/cloudflare-one/applications/)**: Grant admin permissions to specific Access Applications.  
+- **[Identity Providers](https://developers.cloudflare.com/cloudflare-one/identity/)**: Grant admin permissions to individual Identity Providers.  
+- **[Targets](https://developers.cloudflare.com/cloudflare-one/applications/non-http/infrastructure-apps/#1-add-a-target)**: Grant admin rights to specific Targets
+
+![Updated Permissions Policy UX](~/assets/images/changelog/fundamentals/2025-10-01-fine-grained-permissioning-ux.png) 
+
+<Aside>
+
+During the public beta, members must also be assigned an account-scoped, read only role to view resources in the dashboard. This restriction will be lifted in a future release. 
+- **Account Read Only** plus a fine-grained permission for a specific App, IdP, or Target  
+- **Cloudflare Zero Trust Read Only** plus fine-grained permission for a specific App, IdP, or Target  
+
+</Aside>
+
+For more info:
+
+- [Get started with Cloudflare Permissioning](/fundamentals/manage-members/roles/)
+- [Manage Member Permissioning via the UI & API](/fundamentals/manage-members/manage)
\ No newline at end of file