diff --git a/CLI/clitree/cli-xml/qos_buffer.xml b/CLI/clitree/cli-xml/qos_buffer.xml
index 1c9f33b77e..883b984c0e 100644
--- a/CLI/clitree/cli-xml/qos_buffer.xml
+++ b/CLI/clitree/cli-xml/qos_buffer.xml
@@ -277,19 +277,19 @@ limitations under the License.
 
     <!-- RoCE buffers -->
     <COMMAND
-        name="roce"
+        name="roce" access="netadmin"
         help="Enable RoCEv2 default buffer configuration"
         >
     </COMMAND>
     <COMMAND
-        name="no roce"
+        name="no roce" access="netadmin"
         help="Disable RoCEv2 default buffer configuration"
         >
     </COMMAND>
 
     <!-- RoCE enable -->
     <COMMAND
-        name="roce enable"
+        name="roce enable" access="netadmin"
         help="Initialize RoCEv2 default buffer configuration"
         mode="subcommand"
         ptype="SUBCOMMAND"
@@ -316,7 +316,7 @@ limitations under the License.
 
     <!-- RoCE enable force-deafults-->
     <COMMAND
-        name="roce enable force-defaults"
+        name="roce enable force-defaults" access="netadmin"
         help="Clear any previous applied QOS buffer and force Initialize RoCEv2 default buffer configuration"
         mode="subcommand"
         ptype="SUBCOMMAND"
@@ -341,7 +341,7 @@ limitations under the License.
 
     <!-- RoCE disable -->
     <COMMAND
-        name="no roce enable"
+        name="no roce enable" access="netadmin"
         help="Clear RoCEv2 default lossless buffer configuration"
         mode="subcommand"
         ptype="SUBCOMMAND"