diff --git a/api-reference/v1.0/includes/users-passwordprofile-permissions.md b/api-reference/v1.0/includes/users-passwordprofile-permissions.md
index fddfcfb1bda..a0e5d15aa47 100644
--- a/api-reference/v1.0/includes/users-passwordprofile-permissions.md
+++ b/api-reference/v1.0/includes/users-passwordprofile-permissions.md
@@ -7,7 +7,7 @@ ms.topic: include
 <!-- markdownlint-disable MD041-->
 
 - *User-PasswordProfile.ReadWrite.All* is the least privileged permission to update the **passwordProfile** property.
-- In delegated scenarios, the calling app must be assigned a supported permission *and* a supported Microsoft Entra role.
+- In delegated scenarios, the calling app must be assigned a supported permission *and* the signed in user assigned with supported Microsoft Entra role.
   - *Privileged Authentication Administrator* is the least privileged role that's allowed to update this property for *all* administrators in the tenant.
   - In general, the signed-in user must have a higher privileged administrator role as indicated in [Who can reset passwords](/graph/api/resources/users#who-can-reset-passwords).
 - In app-only scenarios using Microsoft Graph application permissions, *User-PasswordProfile.ReadWrite.All* is the least privileged permission.