diff --git a/docs/pages/access-controls/reference.mdx b/docs/pages/access-controls/reference.mdx
index 60e9602dfdaca..4bc163a479499 100644
--- a/docs/pages/access-controls/reference.mdx
+++ b/docs/pages/access-controls/reference.mdx
@@ -383,8 +383,7 @@ spec:
 
 With these permissions, users assigned to the role can generate tokens to enroll  
 a server, application, or database, establish a trust relationship between a root 
-cluster and a new Teleport Proxy Service or leaf cluster, or configure a device 
-trust relationship for a managed device.
+cluster and a new Teleport Proxy Service, or add a new leaf cluster.
 
 Because the token resource isn't scoped to a specific context, such as a node or 
 trusted cluster, you should consider any role that provides token permissions to be