diff --git a/calico-cloud/users/create-custom-role-for-entra-id-group.mdx b/calico-cloud/users/create-custom-role-for-entra-id-group.mdx
index f90c783871..891471cba0 100644
--- a/calico-cloud/users/create-custom-role-for-entra-id-group.mdx
+++ b/calico-cloud/users/create-custom-role-for-entra-id-group.mdx
@@ -31,6 +31,9 @@ By managing membership in that security group, you can manage role-based access
    To set up an identity provider for Calico Cloud, open a [support ticket](https://support.tigera.io).
    :::
 2. Select one or more predefined user roles from the **Predefined Roles** list to assign to this group.
+   :::note
+   Organization-level permissions, such as user and role management, are not included when roles are assigned through IdP groups.
+   :::
 1. Click **Save**.
 
 ## Add custom permissions to an IdP group