diff --git a/doc/source/admin/config-rbac.rst b/doc/source/admin/config-rbac.rst
index 69444d56f7c..4835fc3af97 100644
--- a/doc/source/admin/config-rbac.rst
+++ b/doc/source/admin/config-rbac.rst
@@ -101,6 +101,9 @@ the network when running :command:`openstack network list` and
 on that network. No other users (other than admins and the owner)
 will be able to see the network.
 
+.. note::
+   Subnets inherit the RBAC policy entries of their network.
+
 To remove access for that project, delete the policy that allows
 it using the :command:`openstack network rbac delete` command: