diff --git a/src/content/docs/cloudflare-one/roles-permissions.mdx b/src/content/docs/cloudflare-one/roles-permissions.mdx
index 746f86164d13587..df346f7d7afb124 100644
--- a/src/content/docs/cloudflare-one/roles-permissions.mdx
+++ b/src/content/docs/cloudflare-one/roles-permissions.mdx
@@ -52,3 +52,4 @@ For more information on Email Security roles, refer to [Account-scoped roles](/f
 - **Email Security Analyst**: Has analyst access. Can take action on emails and read emails.
 - **Email Security Reporting**: Can read metrics.
 - **Email Security Read Only**: Can read all information, but cannot take action on anything.
+- **Email Security Policy Admin**: Can read all settings, but only write allow policies, trusted domains, and blocked senders.