diff --git a/doc/config-reference/source/block-storage/drivers/zfssa-iscsi-driver.rst b/doc/config-reference/source/block-storage/drivers/zfssa-iscsi-driver.rst
index 86bae26de6..aa46a39689 100644
--- a/doc/config-reference/source/block-storage/drivers/zfssa-iscsi-driver.rst
+++ b/doc/config-reference/source/block-storage/drivers/zfssa-iscsi-driver.rst
@@ -54,6 +54,17 @@ Configuration
       zfssa:configuration roles OpenStackRole auth (uncommitted)> set scope=stmf
       zfssa:configuration roles OpenStackRole auth (uncommitted)> set allow_configure=true
       zfssa:configuration roles OpenStackRole auth (uncommitted)> commit
+      zfssa:configuration roles OpenStackRole> authorizations create
+      zfssa:configuration roles OpenStackRole auth (uncommitted)> set scope=nas
+      zfssa:configuration roles OpenStackRole auth (uncommitted)> set allow_clone=true
+      zfssa:configuration roles OpenStackRole auth (uncommitted)> set allow_createProject=true
+      zfssa:configuration roles OpenStackRole auth (uncommitted)> set allow_createShare=true
+      zfssa:configuration roles OpenStackRole auth (uncommitted)> set allow_changeSpaceProps=true
+      zfssa:configuration roles OpenStackRole auth (uncommitted)> set allow_changeGeneralProps=true
+      zfssa:configuration roles OpenStackRole auth (uncommitted)> set allow_destroy=true
+      zfssa:configuration roles OpenStackRole auth (uncommitted)> set allow_rollback=true
+      zfssa:configuration roles OpenStackRole auth (uncommitted)> set allow_takeSnap=true
+      zfssa:configuration roles OpenStackRole auth (uncommitted)> commit
 
    You can create a user with a specific role as follows: