diff --git a/docs/platform/concepts/permissions.md b/docs/platform/concepts/permissions.md
index 76102cb84..249d0a992 100644
--- a/docs/platform/concepts/permissions.md
+++ b/docs/platform/concepts/permissions.md
@@ -91,21 +91,22 @@ These permissions apply to the
-| Console name | API name | Allowed actions |
-| ---------------------------- | ----------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| View project audit logs | `project:audit_logs:read` |
- [View the logs](/docs/platform/howto/view-project-logs) for the project.
- View all services in the project.
|
-| View project integrations | `project:integrations:read` | - View all integration endpoints for the project.
- View all service integrations for the project, including integrations with services in other projects.
|
-| Manage project integrations | `project:integrations:write` | - Add and remove integration endpoints.
- Enable and disable service integrations.
- Create services to integrate an existing service with.
- Read and write integration secrets.
|
-| View project networking | `project:networking:read` | - View all project VPCs.
- List all peering connections.
|
-| Manage project networking | `project:networking:write` | - Create, edit, and delete project VPCs and peering connections.
- View all project VPCs and peering connections.
|
-| View project permissions | `project:permissions:read` | - View all users granted permissions to a project.
|
-| View services | `project:services:read` | - View all details for services in a project, except the service logs and metrics.
|
-| Manage services | `project:services:write` | - Create and delete services.
- Power on and off services.
- Add and remove dynamic disk sizing and tiered storage.
- Change service plans.
- Change deployment models.
- Change clouds and regions.
- Update IP allowlists.
- Change the network configuration options.
- Add, edit, and delete service tags.
- Enable and disable termination protection.
- Configure backup settings.
- Add and remove service contacts.
- Create a fork of a service.
|
-| Manage service configuration | `service:configuration:write` | - Change clouds and regions.
- Change deployment models.
- Update IP allowlists.
- Change the network configuration options.
- Add and remove service tags.
- Enable and disable termination protection.
- Configure backup settings.
- Add and remove service contacts.
|
-| Access data | `service:data:write` | - Perform service queries through the API and Console.
- View query statistics and current queries.
- Manage service-specific features like Kafka Topics and Schemas, PostgreSQL connection pools, and OpenSearch indexes.
|
-| View service logs | `service:logs:read` | - View logs for all services in the project.
**Service logs may contain sensitive information.** |
-| View configuration secrets | `service:secrets:read` | - Read service configuration secrets such as keys.
- View service users.
|
-| Manage service users | `service:users:write` | - Create and delete service users.
- View service users.
- View, update, and reset connection information for services.
- View service user credentials.
- Manage service user credentials.
- View all services in a project.
|
+| Console name | API name | Allowed actions |
+| ---------------------------- | ----------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| View project audit logs | `project:audit_logs:read` | - [View the logs](/docs/platform/howto/view-project-logs) for the project.
- View all services in the project.
|
+| View project integrations | `project:integrations:read` | - View all integration endpoints for the project.
- View all service integrations for the project, including integrations with services in other projects.
|
+| Manage project integrations | `project:integrations:write` | - Add and remove integration endpoints.
- Enable and disable service integrations.
- Create services to integrate an existing service with.
- Read and write integration secrets.
|
+| View project networking | `project:networking:read` | - View all project VPCs.
- List all peering connections.
|
+| Manage project networking | `project:networking:write` | - Create, edit, and delete project VPCs and peering connections.
- View all project VPCs and peering connections.
|
+| View project permissions | `project:permissions:read` | - View all users granted permissions to a project.
|
+| View services | `project:services:read` | - View all details for services in a project, except the service logs and metrics.
|
+| Manage services | `project:services:write` | - Create and delete services.
- Power on and off services.
- Add and remove dynamic disk sizing and tiered storage.
- Change service plans.
- Change deployment models.
- Change clouds and regions.
- Update IP allowlists.
- Change the network configuration options.
- Add, edit, and delete service tags.
- Enable and disable termination protection.
- Configure backup settings.
- Add and remove service contacts.
- Create a fork of a service.
|
+| Manage service configuration | `service:configuration:write` | - Change clouds and regions.
- Change deployment models.
- Update IP allowlists.
- Change the network configuration options.
- Add and remove service tags.
- Enable and disable termination protection.
- Configure backup settings.
- Add and remove service contacts.
|
+| Access data | `service:data:write` | - Perform service queries through the API and Console.
- View query statistics and current queries.
- Manage service-specific features like Kafka Topics and Schemas, PostgreSQL connection pools, and OpenSearch indexes.
|
+| View service logs | `service:logs:read` | - View logs for all services in the project.
**Service logs may contain sensitive information.** |
+| View service metrics | `service:metrics:read` | - View metrics for all services in the project.
|
+| View configuration secrets | `service:secrets:read` | - Read service configuration secrets such as keys.
- View service users.
|
+| Manage service users | `service:users:write` | - Create and delete service users.
- View service users.
- View, update, and reset connection information for services.
- View service user credentials.
- Manage service user credentials.
- View all services in a project.
|