diff --git a/vsellier/swh-c4-model/docs/provenance-v0.3/provenance.md b/vsellier/swh-c4-model/docs/provenance-v0.3/provenance.md
index d6030915eba26a6bcda0d12ff467f988d2c66f03..3fe4c90a0697381ecf7453c0579d34976830c619 100644
--- a/vsellier/swh-c4-model/docs/provenance-v0.3/provenance.md
+++ b/vsellier/swh-c4-model/docs/provenance-v0.3/provenance.md
@@ -162,7 +162,10 @@ any data loss occurs, we need to restart the dataset installation process.
 
 ### User management
 
-Users are the ones references in keycloak, probably with a specific role.
+Users management happen with keycloak.
+
+For provenance, users allows to manipulate the provenance have the role
+`swh.web.api.provenance`.
 
 ### Red button