addressing documentation gap with minimum permissions

Author: dhtclk

docs/cloud/features/05_admin_features/api/openapi.md

@@ -34,6 +34,10 @@ This document covers the ClickHouse Cloud API. For database API endpoints, pleas
 <br/>
 :::note
 Permissions align with ClickHouse Cloud [predefined roles](/cloud/security/console-roles). The developer role has read-only permissions for assigned services and the admin role has full read and write permissions.
+:::
+
+:::tip Query API Endpoints
+To use API keys with [Query API Endpoints](/cloud/get-started/query-endpoints), set Organization Role to `Member` (minimum) and grant Service Role access to `Query Endpoints`.
 :::
 
   <Image img={image_03} size="md" alt="Create API key form" border/>

docs/cloud/guides/SQL_console/query-endpoints.md

@@ -24,11 +24,15 @@ The **Query API Endpoints** feature allows you to create an API endpoint directl
 ## Pre-requisites {#quick-start-guide}
 
 Before proceeding, ensure you have:
-- an API key
-- an Admin Console Role.
+- An API key with appropriate permissions
+- An Admin Console Role
 
 You can follow this guide to [create an API key](/cloud/manage/openapi) if you don't yet have one.
 
+:::note Minimum permissions
+To query an API endpoint, the API key needs `Member` organization role with `Query Endpoints` service access. The database role is configured when you create the endpoint.
+:::
+
 <VerticalStepper headerLevel="h3">
 
 ### Create a saved query {#creating-a-saved-query}