diff --git a/datacenter/ucp/2.0/guides/user-management/permission-levels.md b/datacenter/ucp/2.0/guides/user-management/permission-levels.md
index 6a86b5d6a4..2016059d33 100644
--- a/datacenter/ucp/2.0/guides/user-management/permission-levels.md
+++ b/datacenter/ucp/2.0/guides/user-management/permission-levels.md
@@ -37,6 +37,10 @@ access to full control over the resources.
 When a user only has a default permission assigned, only them and admin
 users can see the containers they deploy in the cluster.
 
+**NOTE**: Full-control users can utilize host-mounted volumes, which can potentially gain 
+ access to sensitive material on the cluster. We recommend giving full-control permissions 
+ to users you would trust with admin-level access.
+
 ## Team permission levels
 
 Teams allow you to define fine-grain permissions to services, containers, and