diff --git a/content/rancher/v2.x/en/admin-settings/rbac/cluster-project-roles/_index.md b/content/rancher/v2.x/en/admin-settings/rbac/cluster-project-roles/_index.md
index e78abc06b00..87e76579ec2 100644
--- a/content/rancher/v2.x/en/admin-settings/rbac/cluster-project-roles/_index.md
+++ b/content/rancher/v2.x/en/admin-settings/rbac/cluster-project-roles/_index.md
@@ -60,6 +60,9 @@ _Project roles_ are roles that can be used to grant users access to a project. T
 - **Read Only:**
 
     These users can view everything in the project but cannot create, update, or delete anything.
+    
+    > **Note:** If a user is added to a project as an owner or a member they will have permission to create namespaces in all projects they are a member of, even as a Read Only member. 
+    
 
 #### Custom Project Roles
 
@@ -142,4 +145,4 @@ When you revoke the cluster membership for a user that's explicitly assigned mem
 - Access the projects they hold membership in.
 - Exercise any [individual project roles](#project-role-reference) they are assigned.
 
-If you want to completely revoke a user's access within a cluster, revoke both their cluster and project memberships.
\ No newline at end of file
+If you want to completely revoke a user's access within a cluster, revoke both their cluster and project memberships.