diff --git a/apb_devel/cli_tooling.adoc b/apb_devel/cli_tooling.adoc
index e31eddd1470a..28b72a8d0e8d 100644
--- a/apb_devel/cli_tooling.adoc
+++ b/apb_devel/cli_tooling.adoc
@@ -24,8 +24,33 @@ takes care of the details so they should be easy to deploy.
 [[apb-devel-cli-install-prereqs]]
 === Prerequisites
 
+[[apb-devel-cli-install-prereqs-docker]]
+==== Docker Daemon
+
 The `docker` daemon must be correctly installed and running on the system.
 
+[[apb-devel-cli-install-prereqs-access-permissions]]
+==== Access Permissions
+
+You must be logged in via `oc` as a user with *cluster-admin* permissions:
+
+----
+$ oc login -u <user> <openshift_server>
+----
+
+To add this role to another user, you can run the following as a user that
+already has such permissions (for example, the *system:admin* default system
+user):
+
+----
+$ oc adm policy \
+    add-cluster-role-to-user \
+    cluster-admin <user>
+----
+
+This permission requirement is so that the development lifecycle of the `apb`
+tool can function.
+
 ifdef::openshift-origin[]
 [[apb-devel-cli-install-containerized]]
 === Running From a Container