diff --git a/ocp-admin/.catalog/deploy_and_use.md b/ocp-admin/.catalog/deploy_and_use.md
index 1e98b9f5..923c8413 100644
--- a/ocp-admin/.catalog/deploy_and_use.md
+++ b/ocp-admin/.catalog/deploy_and_use.md
@@ -63,7 +63,7 @@ export KUBECONFIG="/path/to/your/kubeconfig"
 
 ### Step 3: Use the skills
 
-The pack provides 7 skills. See the [ocp-admin README](../README.md) for the full list with descriptions and usage examples.
+The pack provides 8 skills. See the [ocp-admin README](../README.md) for the full list with descriptions and usage examples.
 
 ### Uninstall
 
diff --git a/rh-sre/.catalog/deploy_and_use.md b/rh-sre/.catalog/deploy_and_use.md
index ea5d9ef8..a76f5f25 100644
--- a/rh-sre/.catalog/deploy_and_use.md
+++ b/rh-sre/.catalog/deploy_and_use.md
@@ -41,7 +41,7 @@ The pack uses three MCP servers that require credentials passed as environment v
 
 **For CVE discovery and remediation** (`lightspeed-mcp`):
 
-1. Create a Red Hat Lightspeed service account at [console.redhat.com](https://console.redhat.com/)
+1. Create a Red Hat Lightspeed service account ([setup guide](https://github.com/RedHatInsights/insights-mcp#service-account-setup))
 2. Export the credentials:
 
 ```bash
@@ -49,6 +49,8 @@ export LIGHTSPEED_CLIENT_ID="<your-client-id>"
 export LIGHTSPEED_CLIENT_SECRET="<your-client-secret>"
 ```
 
+**Note:** A new service account has no permissions by default. An Organization Administrator must assign it RBAC roles — see the [setup guide](https://github.com/RedHatInsights/insights-mcp#service-account-setup). Without roles, skills return `403 Forbidden`.
+
 **For Ansible Automation Platform playbook execution** (optional — `aap-mcp-job-management`, `aap-mcp-inventory-management`):
 
 ```bash