diff --git a/docs/cloud/manage-access/roles-and-permissions.mdx b/docs/cloud/manage-access/roles-and-permissions.mdx
index 4831282226..ea2b4ee57d 100644
--- a/docs/cloud/manage-access/roles-and-permissions.mdx
+++ b/docs/cloud/manage-access/roles-and-permissions.mdx
@@ -33,6 +33,10 @@ The following table provides a summary of the account-level roles and their prim
 | Finance Admin | Manages billing and payment information     | No                    | None                                    | Full billing, payments, and usage         |
 | Read-Only     | Views account configuration and resources   | No                    | None                                    | None                              |
 
+Account Owner is the only customer role that can assign Finance Admin. This applies to users, groups, and Service
+Accounts. Global Admin can create these principals but cannot assign Finance Admin. Global Admin has usage visibility,
+not billing or payment access. Finance Admin is not a substitute for Account Owner.
+
 Account-level roles don't govern day-to-day operations within a Namespace. Access to resources inside a Namespace, such
 as Workflows and Workflow Executions, is controlled by [Namespace-level permissions](#namespace-level-permissions).
 
diff --git a/docs/cloud/manage-access/users.mdx b/docs/cloud/manage-access/users.mdx
index fb118a6ba0..f034cc6bfa 100644
--- a/docs/cloud/manage-access/users.mdx
+++ b/docs/cloud/manage-access/users.mdx
@@ -55,7 +55,7 @@ In addition, there are two roles that the Global Admin cannot assign:
 - **Finance Admin**
   - Has permissions to view [billing](/cloud/billing-and-usage) information and update payment information
   - Otherwise, has the same permissions as Account Read-only users
-  - Can be assigned to Service Accounts by a Global Admin, but otherwise can only be assigned by an Account Owner
+  - Only an Account Owner can assign Finance Admin to a user, group, or Service Account
 
 :::note Default Role