diff --git a/articles/role-based-access.md b/articles/role-based-access.md
index 1ebf3c0f62..e6a5e59ff8 100644
--- a/articles/role-based-access.md
+++ b/articles/role-based-access.md
@@ -106,6 +106,9 @@ GitOps is an API-only and write-only role that can be used on CI/CD pipelines.
 | Lock, unlock, and wipe hosts\*                                                                                                             |          |            | ✅         | ✅    |         |
 | Turn off MDM                                                                                                                               |          |            | ✅         | ✅    |         |
 | Configure Microsoft Entra conditional access integration                                                                                   |          |            |           | ✅    |       |
+| View [custom variables](https://fleetdm.com/docs/rest-api/rest-api#list-custom-variables)             | ✅       | ✅         | ✅         | ✅    |         |
+| Create, edit, and delete custom variables  | ✅       | ✅         | ✅         | ✅    |         |
+
 
 \* Applies only to Fleet Premium
 
@@ -180,6 +183,7 @@ Users with access to multiple teams can be assigned different roles for each tea
 | View script details by host                                                                                                      | ✅            | ✅             | ✅              | ✅         |             |
 | Lock, unlock, and wipe hosts                                                                                                     |               |                | ✅              | ✅         |             |
 | Turn off MDM                                                                                                                     |               |                | ✅              | ✅         |             |
+| View [custom variables](https://fleetdm.com/docs/rest-api/rest-api#list-custom-variables)   | ✅            | ✅             | ✅               | ✅         |         |
 
 
 \* Applies only to [Fleet REST API](https://fleetdm.com/docs/using-fleet/rest-api)