diff --git a/docs/integrations/app-connections/gitlab.mdx b/docs/integrations/app-connections/gitlab.mdx
index 009ca040e..c9af952a7 100644
--- a/docs/integrations/app-connections/gitlab.mdx
+++ b/docs/integrations/app-connections/gitlab.mdx
@@ -204,57 +204,75 @@ Infisical supports two methods for connecting to GitLab: **OAuth** and **Access
- For Secret Syncs, your token will require the `api` scope and at least a **Maintainer** role or higher.
+ For Secret Syncs, the required role depends on your sync destination:
+ - **Project variables**: Requires **Maintainer** role or higher
+ - **Group variables**: Requires **Owner** role
+
+ Your token will require the `api` scope.
+
Click **Create group access token** to create the token.
+
+
+ Use the **Owner** role if you need to sync to group-level variables. The **Maintainer** role is sufficient only for project-level variables.
+
- For Secret Scanning, your token will require the `api` scope and at least a **Maintainer** role or higher.
- 
+ To set up Secret Scanning, the required permissions depend on the data source level:
+ - **Project-level data source:** Requires **Maintainer** role or higher
+ - **Group-level data source:** Requires **Owner** role
- Click **Create group access token** to create the token.
-
-
+ Your token will require the `api` scope.
-
- Group Access Token connections require manual token rotation when your GitLab access token expires or is regenerated. Monitor your connection status and update the token as needed.
-
-
-
- Copy the generated token immediately as it won't be shown again.
- 
-
- Keep your access token secure and do not share it. Anyone with access to this token can access all projects within your GitLab group.
-
-
-
-
-
+ 
- ## Setup GitLab Access Token Connection in Infisical
+ Click **Create group access token** to create the token.
+
+
-
-
- Navigate to the **App Connections** page in the desired project.
- 
-
-
- Select the **GitLab Connection** option from the connection options modal.
- 
-
-
- Select the **Access Token** method, paste your GitLab access token in the provided field, and select the appropriate token type.
+
+ Group Access Token connections require manual token rotation when your GitLab access token expires or is regenerated. Monitor your connection status and update the token as needed.
+
+
+
+ Copy the generated token immediately as it won't be shown again.
+ 
+
+ Keep your access token secure and do not share it. Anyone with access to this token can access all projects within your GitLab group.
+
+
+
- 
+
- Click **Connect** to establish the connection.
-
-
- Your **GitLab Connection** is now available for use.
- 
-
-
+
+
+## Setup GitLab Access Token Connection in Infisical
+
+
+
+ Navigate to the **App Connections** page in the desired project.
+ 
+
+
+ Select the **GitLab Connection** option from the connection options modal.
+ 
+
+
+ Select the **Access Token** method, paste your GitLab access token in the provided field, and select the appropriate token type.
+
+ 
+
+ Click **Connect** to establish the connection.
+
+
+
+
+ Your **GitLab Connection** is now available for use.
+ 
+
+