diff --git a/API-Domains.md b/API-Domains.md
index dcc8573..a2c52eb 100644
--- a/API-Domains.md
+++ b/API-Domains.md
@@ -45,6 +45,8 @@
 
 Note this won't create a SOA record for the domain, so it stays invalid until the SOA is set using the API below.
 
+Can currently only be called by an admin user.
+
 ### Body
 ```json
 {
@@ -88,6 +90,8 @@ Or for a slave zone:
 ## Delete domain
 `DELETE /domains/{id}`
 
+Can currently only be called by an admin user.
+
 ### Response
 | code | result |
 | --- | --- |