diff --git a/website/source/docs/agent/options.html.md b/website/source/docs/agent/options.html.md index b868991f72..734465e729 100644 --- a/website/source/docs/agent/options.html.md +++ b/website/source/docs/agent/options.html.md @@ -590,10 +590,10 @@ default will automatically work with some tooling. The ACL token used to authorize secondary datacenters with the primary datacenter for replication operations. This token is required for servers outside the [`primary_datacenter`](#primary_datacenter) when ACLs are enabled. This token may be provided later using the [agent token API](/api/agent.html#update-acl-tokens) - on each server. If the `replication` token is set in the config. This token must have at least "read" permissions - on ACL data but if ACL token replication is enabled then it must have "write" permissions. - This also enables Connect replication in Consul Enterprise, for which the token will require - both operator "write" and intention "read" permissions for replicating CA and Intention data. + on each server. This token must have at least "read" permissions on ACL data but if ACL + token replication is enabled then it must have "write" permissions. This also enables + Connect replication in Consul Enterprise, for which the token will require both operator + "write" and intention "read" permissions for replicating CA and Intention data. * `acl_datacenter` - **This field is deprecated in Consul 1.4.0. See the [`primary_datacenter`](#primary_datacenter) field instead.**