diff --git a/servicecontrol/security/entra-id-authentication.md b/servicecontrol/security/entra-id-authentication.md
index e036f091d0e..d1ca1802405 100644
--- a/servicecontrol/security/entra-id-authentication.md
+++ b/servicecontrol/security/entra-id-authentication.md
@@ -51,6 +51,9 @@ Follow Microsoft's guide to [expose a web API](https://learn.microsoft.com/en-us
 | Admin consent display name | `Full access to ServiceControl API`          |
 | Admin consent description  | `Allows ServicePulse to call ServiceControl` |
 
+> [!NOTE]
+> Ensure that you are assigned as the [owner of the API application](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-configure-app-expose-web-apis#assign-application-owner), otherwise the API will not be listed when requesting API permissions.
+
 ## Step 2: Register ServicePulse
 
 Follow Microsoft's guide to [register an application](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app) with the following settings: