diff --git a/api-reference/beta/api/intune-deviceconfig-deviceconfiguration-getomasettingplaintextvalue.md b/api-reference/beta/api/intune-deviceconfig-deviceconfiguration-getomasettingplaintextvalue.md
index 639a2826d78..9851947b842 100644
--- a/api-reference/beta/api/intune-deviceconfig-deviceconfiguration-getomasettingplaintextvalue.md
+++ b/api-reference/beta/api/intune-deviceconfig-deviceconfiguration-getomasettingplaintextvalue.md
@@ -15,6 +15,7 @@ Namespace: microsoft.graph
 > **Important:** Microsoft supports Intune /beta APIs, but they are subject to more frequent change. Microsoft recommends using version v1.0 when possible. Check an API's availability in version v1.0 using the Version selector.
 
 > **Note:** The Microsoft Graph API for Intune requires an [active Intune license](https://go.microsoft.com/fwlink/?linkid=839381) for the tenant.
+> **Note:** DeviceManagementConfiguration.ReadWrite.All permissions are needed. Encrypted values in getOmaSettingPlainTextValue require DeviceManagementConfiguration.ReadWrite.All
 
 
 
@@ -25,7 +26,7 @@ One of the following permissions is required to call this API. To learn more, in
 
 |Permission type|Permissions (from least to most privileged)|
 |:---|:---|
-|Delegated (work or school account)|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
+|Delegated (work or school account)|DeviceManagementConfiguration.ReadWrite.All|
 |Delegated (personal Microsoft account)|Not supported.|
 |Application|DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All|
 
@@ -77,4 +78,4 @@ Content-Length: 57
 {
   "value": "Get Oma Setting Plain Text Value value"
 }
-```
\ No newline at end of file
+```