diff --git a/deployment/run/tf-proxmox/variables.tf b/deployment/run/tf-proxmox/variables.tf
index d9676db1..0c940574 100644
--- a/deployment/run/tf-proxmox/variables.tf
+++ b/deployment/run/tf-proxmox/variables.tf
@@ -10,7 +10,11 @@ variable "ssh_user" {
 }
 
 variable "proxmox_user" {
-  description = "the ProxmoX user to use"
+  description = <<EOT
+    the ProxmoX user to use. needs privileges:
+    - `VM.Monitor`
+    - ...
+  EOT
   type = string
   default = "root@pam"
 }