diff --git a/docs/operator-manual/rbac.md b/docs/operator-manual/rbac.md
index 753b3e81ec..0f7918ee94 100644
--- a/docs/operator-manual/rbac.md
+++ b/docs/operator-manual/rbac.md
@@ -45,4 +45,4 @@ data:
 ## Anonymous Access
 
 THe anonymous access to Argo CD can be enabled using `users.anonymous.enabled` field in `argocd-cm` (see [./argocd-cm.yaml](argocd-cm.yaml)).
-The anonymous users get default role permissions specified argocd-rbac-cm.yaml.
\ No newline at end of file
+The anonymous users get default role permissions specified by `policy.default` in `argocd-rbac-cm.yaml. For read-only access you'll want `policy.default: role:readonly` as above