diff --git a/docs/data-sources/service_account.md b/docs/data-sources/service_account.md
index e57f7e4..fc2de70 100644
--- a/docs/data-sources/service_account.md
+++ b/docs/data-sources/service_account.md
@@ -52,7 +52,7 @@ output "service_account" {
 
 ### Read-Only
 
-- `account_access` (String) The role on the account. Must be one of admin, developer, or read (case-insensitive).
+- `account_access` (String) The role on the account. Must be one of admin, developer, read, or metricsread (case-insensitive).
 - `created_at` (String) The creation time of the Service Account.
 - `description` (String) The description of the Service Account.
 - `name` (String) The name associated with the service account.
diff --git a/docs/data-sources/service_accounts.md b/docs/data-sources/service_accounts.md
index a88213e..82c5fcc 100644
--- a/docs/data-sources/service_accounts.md
+++ b/docs/data-sources/service_accounts.md
@@ -29,7 +29,7 @@ Optional:
 
 Read-Only:
 
-- `account_access` (String) The role on the account. Must be one of admin, developer, or read (case-insensitive).
+- `account_access` (String) The role on the account. Must be one of admin, developer, read, or metricsread (case-insensitive).
 - `created_at` (String) The creation time of the Service Account.
 - `description` (String) The description of the Service Account.
 - `id` (String) The unique identifier of the Service Account.
diff --git a/docs/resources/service_account.md b/docs/resources/service_account.md
index cb7fee0..8c0627b 100644
--- a/docs/resources/service_account.md
+++ b/docs/resources/service_account.md
@@ -54,7 +54,7 @@ resource "temporalcloud_service_account" "namespace_admin" {
 
 ### Required
 
-- `account_access` (String) The role on the account. Must be one of admin, developer, or read (case-insensitive).
+- `account_access` (String) The role on the account. Must be one of admin, developer, read, or metricsread (case-insensitive).
 - `name` (String) The name associated with the service account.
 
 ### Optional
diff --git a/internal/provider/service_account_resource.go b/internal/provider/service_account_resource.go
index 872afc5..2bb4822 100644
--- a/internal/provider/service_account_resource.go
+++ b/internal/provider/service_account_resource.go
@@ -124,7 +124,7 @@ func (r *serviceAccountResource) Schema(ctx context.Context, _ resource.SchemaRe
 			},
 			"account_access": schema.StringAttribute{
 				CustomType:  internaltypes.CaseInsensitiveStringType{},
-				Description: "The role on the account. Must be one of admin, developer, or read (case-insensitive).",
+				Description: "The role on the account. Must be one of admin, developer, read, or metricsread (case-insensitive).",
 				Required:    true,
 				Validators: []validator.String{
 					stringvalidator.OneOfCaseInsensitive(enums.AllowedAccountAccessRoles()...),
diff --git a/internal/provider/service_accounts_datasource.go b/internal/provider/service_accounts_datasource.go
index 6dfdb14..085b4bd 100644
--- a/internal/provider/service_accounts_datasource.go
+++ b/internal/provider/service_accounts_datasource.go
@@ -100,7 +100,7 @@ func serviceAccountSchema(idRequired bool) map[string]schema.Attribute {
 		},
 		"account_access": schema.StringAttribute{
 			CustomType:  internaltypes.CaseInsensitiveStringType{},
-			Description: "The role on the account. Must be one of admin, developer, or read (case-insensitive).",
+			Description: "The role on the account. Must be one of admin, developer, read, or metricsread (case-insensitive).",
 			Computed:    true,
 		},
 		"namespace_accesses": schema.SetNestedAttribute{