From b5f00c22e2332879d518062b82473bca1be9e677 Mon Sep 17 00:00:00 2001
From: Michael Haggerty <mhaggerty@hashicorp.com>
Date: Thu, 16 Jan 2025 13:15:05 -0600
Subject: [PATCH] docs: add auth note to log_streaming_destination

---
 docs/resources/log_streaming_destination.md           | 3 +++
 templates/resources/log_streaming_destination.md.tmpl | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/docs/resources/log_streaming_destination.md b/docs/resources/log_streaming_destination.md
index dea266a4b..99cb16b74 100644
--- a/docs/resources/log_streaming_destination.md
+++ b/docs/resources/log_streaming_destination.md
@@ -11,6 +11,9 @@ description: |-
 
 The Streaming Destination resource allows users to configure an external log system to stream HCP logs to.
 
+To manage destinations, you must authenticate with an organization-level service principal with
+the `contributor` or `admin` role.
+
 ## Example Usage: CloudWatch
 
 ```terraform
diff --git a/templates/resources/log_streaming_destination.md.tmpl b/templates/resources/log_streaming_destination.md.tmpl
index abab093fc..9e41b55d0 100644
--- a/templates/resources/log_streaming_destination.md.tmpl
+++ b/templates/resources/log_streaming_destination.md.tmpl
@@ -11,6 +11,9 @@ description: |-
 
 {{ .Description | trimspace }}
 
+To manage destinations, you must authenticate with an organization-level service principal with
+the `contributor` or `admin` role.
+
 ## Example Usage: CloudWatch
 
 {{ tffile "examples/resources/hcp_log_streaming_destination/resource_cloudwatch.tf" }}