diff --git a/docs/platform/concepts/permissions.md b/docs/platform/concepts/permissions.md
index 5d08251b..c3c7179a 100644
--- a/docs/platform/concepts/permissions.md
+++ b/docs/platform/concepts/permissions.md
@@ -26,10 +26,10 @@ and services within it.
### Organization roles
-| Console name | API name | Allowed actions |
-| ------------------------------- | -------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Organization member | None | This is the default role for all organization users. **You cannot grant this role to users.**
All non-managed organization users can:
- Edit their profiles.
- Create organizations.
- Leave organizations.
- Add [allowed authentication methods](/docs/platform/howto/set-authentication-policies).
- Generate and revoke personal tokens, if allowed by the [authentication policy](/docs/platform/howto/set-authentication-policies).
- Enable and disable feature previews.
[Managed users](/docs/platform/concepts/managed-users) have more restrictions. |
-| Admin | `role:organization:admin` | - Full access to the organization.
- View and change billing information.
- Change the authentication policy.
- Invite, deactivate, and remove organization users.
- Create, edit, and delete groups.
- Create and delete application users and their tokens.
- Add and remove domains.
- Add, enable, disable, and remove identity providers.
|
+| Console name | API name | Allowed actions |
+| ------------------- | ------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Organization member | None | This is the default role for all organization users. **You cannot grant this role to users.**
All non-managed organization users can: - Edit their profiles.
- Create organizations.
- Leave organizations.
- Add [allowed authentication methods](/docs/platform/howto/set-authentication-policies).
- Generate and revoke personal tokens, if allowed by the [authentication policy](/docs/platform/howto/set-authentication-policies).
- Enable and disable feature previews.
[Managed users](/docs/platform/concepts/managed-users) have more restrictions. |
+| Admin | `role:organization:admin` | - Full access to the organization.
- View and change billing information.
- Change the authentication policy.
- Invite, deactivate, and remove organization users.
- Create, edit, and delete groups.
- Create and delete application users and their tokens.
- Add and remove domains.
- Add, enable, disable, and remove identity providers.
Cannot delete an organization or manage its super admin. |
### Organization permissions
diff --git a/docs/platform/howto/make-super-admin.md b/docs/platform/howto/make-super-admin.md
index 9431f4e1..5bf36c8b 100644
--- a/docs/platform/howto/make-super-admin.md
+++ b/docs/platform/howto/make-super-admin.md
@@ -10,6 +10,9 @@ The super admin role is a special role that has unrestricted access to an organi
This role should be limited to as few users as possible for organization setup and emergency use. For daily administrative tasks, assign users the [organization admin role](/docs/platform/concepts/permissions) instead. Aiven also highly recommends enabling [two-factor authentication](/docs/platform/howto/user-2fa) for super admin.
:::
+Only super admin can grant or revoke super admin privileges for other users. Super admin
+are also the only users that can delete an organization.
+
To make a user a super admin:
1. In the organization, click **Admin**.