diff --git a/docs/admin/external.rst b/docs/admin/external.rst
index fbb9cc0..bf7cd9b 100644
--- a/docs/admin/external.rst
+++ b/docs/admin/external.rst
@@ -104,6 +104,9 @@ and
 access tokens.
 Create the type of token that is suitable according to your threat model.
 
+If you are using a personal access token, the user must have at least the *Maintainer*
+role for the project.
+
 Add a name so that you will be reminded of the purpose of this token when you go
 to look at it later.
 The expiry can be set according to your threat model.