diff --git a/docs/integrations/platforms/kubernetes/infisical-dynamic-secret-crd.mdx b/docs/integrations/platforms/kubernetes/infisical-dynamic-secret-crd.mdx
index 555e62652..7fc21e8f9 100644
--- a/docs/integrations/platforms/kubernetes/infisical-dynamic-secret-crd.mdx
+++ b/docs/integrations/platforms/kubernetes/infisical-dynamic-secret-crd.mdx
@@ -124,23 +124,23 @@ When `hostAPI` is not defined the operator fetches secrets from Infisical Cloud.
- The `leaseTTL` is a string-formatted duration that defines the time the lease should last for the dynamic secret.
+ The `leaseTTL` is a string-formatted duration that defines the time the lease should last for the dynamic secret.
-The format of the field is `[duration][unit]` where `duration` is a number and `unit` is a string representing the unit of time.
+ The format of the field is `[duration][unit]` where `duration` is a number and `unit` is a string representing the unit of time.
-The following units are supported:
+ The following units are supported:
-- `s` for seconds (must be at least 5 seconds)
-- `m` for minutes
-- `h` for hours
-- `d` for days
+ - `s` for seconds (must be at least 5 seconds)
+ - `m` for minutes
+ - `h` for hours
+ - `d` for days
-
+
The lease duration at most be 1 day (24 hours). And the TTL must be less than the max TTL defined on the dynamic secret.
-
+
The `managedSecretReference` field is used to define the Kubernetes secret where the dynamic secret lease should be stored. The required fields are `secretName` and `secretNamespace`.
diff --git a/docs/internals/permissions.mdx b/docs/internals/permissions.mdx
index 737d3b71e..b75879900 100644
--- a/docs/internals/permissions.mdx
+++ b/docs/internals/permissions.mdx
@@ -26,8 +26,8 @@ Refer to the table below for a list of subjects and the actions they support.
| Subject | Actions |
| ------------------------- | ----------------------------------------------------------------------------------------------------------- |
| `role` | `read`, `create`, `edit`, `delete` |
-| `member` | `read`, `create`, `edit`, `delete` |
-| `groups` | `read`, `create`, `edit`, `delete` |
+| `member` | `read`, `create`, `edit`, `delete`, `manage-privileges` |
+| `groups` | `read`, `create`, `edit`, `delete`, `manage-privileges` |
| `settings` | `read`, `create`, `edit`, `delete` |
| `integrations` | `read`, `create`, `edit`, `delete` |
| `webhooks` | `read`, `create`, `edit`, `delete` |
@@ -44,7 +44,7 @@ Refer to the table below for a list of subjects and the actions they support.
| `secret-rollback` | `read`, `create` |
| `secret-approval` | `read`, `create`, `edit`, `delete` |
| `secret-rotation` | `read`, `create`, `edit`, `delete` |
-| `identity` | `read`, `create`, `edit`, `delete` |
+| `identity` | `read`, `create`, `edit`, `delete`, `manage-privileges` |
| `certificate-authorities` | `read`, `create`, `edit`, `delete` |
| `certificates` | `read`, `create`, `edit`, `delete` |
| `certificate-templates` | `read`, `create`, `edit`, `delete` |
@@ -64,23 +64,23 @@ Refer to the table below for a list of subjects and the actions they support.
`read`, `create`, `edit`, `delete`.
-| Subject | Actions |
-| --------------------- | ------------------------------------------------ |
-| `workspace` | `read`, `create` |
-| `role` | `read`, `create`, `edit`, `delete` |
-| `member` | `read`, `create`, `edit`, `delete` |
-| `secret-scanning` | `read`, `create`, `edit`, `delete` |
-| `settings` | `read`, `create`, `edit`, `delete` |
-| `incident-account` | `read`, `create`, `edit`, `delete` |
-| `sso` | `read`, `create`, `edit`, `delete` |
-| `scim` | `read`, `create`, `edit`, `delete` |
-| `ldap` | `read`, `create`, `edit`, `delete` |
-| `groups` | `read`, `create`, `edit`, `delete` |
-| `billing` | `read`, `create`, `edit`, `delete` |
-| `identity` | `read`, `create`, `edit`, `delete` |
-| `project-templates` | `read`, `create`, `edit`, `delete` |
-| `app-connections` | `read`, `create`, `edit`, `delete`, `connect` |
-| `kms` | `read` |
+| Subject | Actions |
+| ------------------- | ------------------------------------------------------------------------------------------------------------------- |
+| `workspace` | `read`, `create` |
+| `role` | `read`, `create`, `edit`, `delete` |
+| `member` | `read`, `create`, `edit`, `delete` |
+| `secret-scanning` | `read`, `create`, `edit`, `delete` |
+| `settings` | `read`, `create`, `edit`, `delete` |
+| `incident-account` | `read`, `create`, `edit`, `delete` |
+| `sso` | `read`, `create`, `edit`, `delete` |
+| `scim` | `read`, `create`, `edit`, `delete` |
+| `ldap` | `read`, `create`, `edit`, `delete` |
+| `groups` | `read`, `create`, `edit`, `delete`, `manage-privileges`, `add-members`, `remove-members` |
+| `billing` | `read`, `create`, `edit`, `delete` |
+| `identity` | `read`, `create`, `edit`, `delete`, `manage-privileges`, `revoke-auth`, `create-token`, `delete-token`, `get-token` |
+| `project-templates` | `read`, `create`, `edit`, `delete` |
+| `app-connections` | `read`, `create`, `edit`, `delete`, `connect` |
+| `kms` | `read` |