diff --git a/hadoop-ozone/recon/src/main/java/org/apache/hadoop/ozone/recon/api/TriggerDBSyncEndpoint.java b/hadoop-ozone/recon/src/main/java/org/apache/hadoop/ozone/recon/api/TriggerDBSyncEndpoint.java
index 070b7e1ccd4f..3ce4fc7f8370 100644
--- a/hadoop-ozone/recon/src/main/java/org/apache/hadoop/ozone/recon/api/TriggerDBSyncEndpoint.java
+++ b/hadoop-ozone/recon/src/main/java/org/apache/hadoop/ozone/recon/api/TriggerDBSyncEndpoint.java
@@ -32,6 +32,7 @@
  */
 @Path("/triggerdbsync")
 @Produces(MediaType.APPLICATION_JSON)
+@AdminOnly
 public class TriggerDBSyncEndpoint {
 
   private OzoneManagerServiceProvider ozoneManagerServiceProvider;
diff --git a/hadoop-ozone/recon/src/test/java/org/apache/hadoop/ozone/recon/api/filters/TestAdminFilter.java b/hadoop-ozone/recon/src/test/java/org/apache/hadoop/ozone/recon/api/filters/TestAdminFilter.java
index e30590df55ee..7c874a9e2994 100644
--- a/hadoop-ozone/recon/src/test/java/org/apache/hadoop/ozone/recon/api/filters/TestAdminFilter.java
+++ b/hadoop-ozone/recon/src/test/java/org/apache/hadoop/ozone/recon/api/filters/TestAdminFilter.java
@@ -33,7 +33,6 @@
 import org.apache.hadoop.ozone.recon.api.NodeEndpoint;
 import org.apache.hadoop.ozone.recon.api.PipelineEndpoint;
 import org.apache.hadoop.ozone.recon.api.TaskStatusService;
-import org.apache.hadoop.ozone.recon.api.TriggerDBSyncEndpoint;
 import org.apache.hadoop.ozone.recon.api.UtilizationEndpoint;
 import org.apache.hadoop.security.UserGroupInformation;
 import org.junit.jupiter.api.Test;
@@ -70,8 +69,14 @@ public void testAdminOnlyEndpoints() {
 
     assertThat(allEndpoints).isNotEmpty();
 
-    // If an endpoint is added, it must be explicitly added to this set or be
-    // marked with @AdminOnly for this test to pass.
+    // If an endpoint is added, it must either require admin privileges by being
+    // marked with the `@AdminOnly` annotation, or be added to this set to exclude it.
+    // - Any endpoint that displays information related to the filesystem namespace
+    //   (including aggregate counts), user information, or allows modification to the
+    //   cluster's state should be marked as `@AdminOnly`.
+    // - Read-only endpoints that only return information about node status or
+    //   cluster state do not require the `@AdminOnly` annotation and can be excluded
+    //   from admin requirements by adding them to this set.
     Set<Class<?>> nonAdminEndpoints = new HashSet<>();
     nonAdminEndpoints.add(UtilizationEndpoint.class);
     nonAdminEndpoints.add(ClusterStateEndpoint.class);
@@ -79,7 +84,6 @@ public void testAdminOnlyEndpoints() {
     nonAdminEndpoints.add(NodeEndpoint.class);
     nonAdminEndpoints.add(PipelineEndpoint.class);
     nonAdminEndpoints.add(TaskStatusService.class);
-    nonAdminEndpoints.add(TriggerDBSyncEndpoint.class);
 
     assertThat(allEndpoints).containsAll(nonAdminEndpoints);