diff --git a/_data/toc.yaml b/_data/toc.yaml
index e97fdfd5b5..25e90e3eea 100644
--- a/_data/toc.yaml
+++ b/_data/toc.yaml
@@ -1572,6 +1572,8 @@ manuals:
           title: Create UCP audit logs
         - path: /ee/ucp/admin/configure/enable-saml-authentication/
           title: Enable SAML authentication
+        - path: /ee/ucp/admin/configure/enable-helm-tiller/
+          title: Enable Helm and Tiller with UCP
         - path: /ee/ucp/admin/configure/external-auth/
           title: Integrate with LDAP
         - path: /ee/ucp/admin/configure/license-your-installation/
@@ -2348,11 +2350,11 @@ manuals:
       - sectiontitle: Manage jobs
         section:
         - path: /ee/dtr/admin/manage-jobs/job-queue/
-          title: Job Queue          
+          title: Job Queue
         - path: /ee/dtr/admin/manage-jobs/audit-jobs-via-ui/
-          title: Audit Jobs with the Web Interface  
+          title: Audit Jobs with the Web Interface
         - path: /ee/dtr/admin/manage-jobs/audit-jobs-via-api/
-          title: Audit Jobs with the API       
+          title: Audit Jobs with the API
         - path: /ee/dtr/admin/manage-jobs/auto-delete-job-logs/
           title: Enable Auto-Deletion of Job Logs
       - sectiontitle: Monitor and troubleshoot
diff --git a/ee/ucp/admin/configure/enable-helm-tiller.md b/ee/ucp/admin/configure/enable-helm-tiller.md
new file mode 100644
index 0000000000..44a767a303
--- /dev/null
+++ b/ee/ucp/admin/configure/enable-helm-tiller.md
@@ -0,0 +1,17 @@
+---
+title: Enable Helm and Tiller with UCP
+description: Learn how to modify service accounts to enable Helm and Tiller to operate with UCP.
+keywords: Helm, ucp, Tiller, Kubernetes, service accounts, Kubernetes
+---
+
+To use Helm and Tiller with UCP, you must modify the `kube-system` default service account to define the necessary roles. Enter the following `kubectl` commands in this order:
+
+```
+kubectl create rolebinding default-view --clusterrole=view --serviceaccount=kube-system:default --namespace=kube-system
+
+kubectl create clusterrolebinding add-on-cluster-admin --clusterrole=cluster-admin --serviceaccount=kube-system:default
+```
+
+## Using Helm
+
+For more information about using Helm, see [Using Helm - Role-Based Access Control](https://docs.helm.sh/using_helm/#role-based-access-control).