diff --git a/docs/modules/onecx-announcement-bff/pages/onecx-announcement-bff-docs.adoc b/docs/modules/onecx-announcement-bff/pages/onecx-announcement-bff-docs.adoc
index 5cfe0af..9429267 100644
--- a/docs/modules/onecx-announcement-bff/pages/onecx-announcement-bff-docs.adoc
+++ b/docs/modules/onecx-announcement-bff/pages/onecx-announcement-bff-docs.adoc
@@ -72,11 +72,13 @@ app:
       spec:
         permissions:
           announcement:
-            read: permission on all GET requests and POST search
+            read: permission on all GET requests and POST search including assigned meta data
             write: permission on PUT, POST, PATCH requests, where objects are saved or updated
             delete: permission on all DELETE requests
           product:
-            read: permission on all GET requests and POST search
+            read: permission to read available products/applications
+          workspace:
+            read: permission to read available workspaces
     keycloak:
       client:
         enabled: true
diff --git a/src/main/helm/values.yaml b/src/main/helm/values.yaml
index 0e5a3bb..edce117 100644
--- a/src/main/helm/values.yaml
+++ b/src/main/helm/values.yaml
@@ -9,11 +9,13 @@ app:
       spec:
         permissions:
           announcement:
-            read: permission on all GET requests and POST search
+            read: permission on all GET requests and POST search including assigned meta data
             write: permission on PUT, POST, PATCH requests, where objects are saved or updated
             delete: permission on all DELETE requests
           product:
-            read: permission on all GET requests and POST search
+            read: permission to read available products/applications
+          workspace:
+            read: permission to read available workspaces
     keycloak:
       client:
         enabled: true
diff --git a/src/main/openapi/openapi-bff.yaml b/src/main/openapi/openapi-bff.yaml
index 48f2598..b4f3005 100644
--- a/src/main/openapi/openapi-bff.yaml
+++ b/src/main/openapi/openapi-bff.yaml
@@ -197,7 +197,7 @@ paths:
     get:
       x-onecx:
         permissions:
-          announcement:
+          workspace:
             - read
       tags:
         - AnnouncementInternal
diff --git a/src/test/resources/mockserver/permissions.json b/src/test/resources/mockserver/permissions.json
index 7afa20c..a4a27a7 100644
--- a/src/test/resources/mockserver/permissions.json
+++ b/src/test/resources/mockserver/permissions.json
@@ -21,6 +21,7 @@
               "delete"
             ],
             "product": ["read"],
+            "workspace": ["read"],
             "permissions": [
               "admin-write",
               "admin-read"
@@ -51,6 +52,7 @@
               "read"
             ],
             "product": ["read"],
+            "workspace": ["read"],
             "permissions": [
               "admin-write",
               "admin-read"