diff --git a/temporal/api/cloud/identity/v1/message.proto b/temporal/api/cloud/identity/v1/message.proto
index 7db0cae..0ede1d8 100644
--- a/temporal/api/cloud/identity/v1/message.proto
+++ b/temporal/api/cloud/identity/v1/message.proto
@@ -12,9 +12,11 @@ option csharp_namespace = "Temporalio.Api.Cloud.Identity.V1";
 import "google/protobuf/timestamp.proto";
 
 message AccountAccess {
-    // The role on the account, should be one of [admin, developer, read]
+    // The role on the account, should be one of [owner, admin, developer, financeadmin, read]
+    // owner - gives full access to the account, including users, namespaces, and billing
     // admin - gives full access the account, including users and namespaces
     // developer - gives access to create namespaces on the account
+    // financeadmin - gives read only access and write access for billing
     // read - gives read only access to the account
     string role = 1;
 }