diff --git a/doc/telemetry.md b/doc/telemetry.md
index 1e405a5..b34cfc8 100644
--- a/doc/telemetry.md
+++ b/doc/telemetry.md
@@ -42,8 +42,8 @@ check kibana works, login to kibana with user `elastic`
 
 create role `apm_writer`, give privileges:
 
-- cluster privileges `manage_ilm`, `read_ilm`, `manage_ingest_pipelines`
-- on index `apm-*` privileges `create_doc`, `create_index`, `view_index_metadata`
+- cluster privileges `manage_ilm`, `read_ilm`, `manage_ingest_pipelines`, `manage_index_templates`
+- on index `apm-*` privileges `create_doc`, `create_index`, `view_index_metadata`, `manage`
 - on index `apm-*sourcemap` privilege `read_cross_cluster`
 
 create user `apm` with roles `apm_writer` and `apm_system`. give it a randomly generated password that you save in `secrets/telemetry/elastic_passwords/apm`