diff --git a/README.md b/README.md
index 890a107..7da1cab 100644
--- a/README.md
+++ b/README.md
@@ -8,6 +8,26 @@ Copyright (c) 2022 Accenture
 
 ## Getting Started
 
+## Required Permission Sets
+
+### Users
+
+**Default Copado PS:**
+
+- Copado User
+- Copado Functions
+- Copado Job Engine
+- Quality Gates (Read Only)
+- Execute Automations
+
+**MCDO PS:**
+
+- Copado Marketing Cloud (_custom_)
+
+### Admins
+
+Please make sure to assign the System Administrator profile and additionally assign the permission sets listed for users.
+
 ### Recommended MCDEV config
 
 Please ensure you limit retrievable types to only supported ones to reduce loading times and avoid errors during deployments:
diff --git a/force-app/main/default/permissionsets/mcdo_Copado_Marketing_Cloud.permissionset-meta.xml b/force-app/main/default/permissionsets/mcdo_Copado_Marketing_Cloud.permissionset-meta.xml
index 1d5bcb8..03821b6 100644
--- a/force-app/main/default/permissionsets/mcdo_Copado_Marketing_Cloud.permissionset-meta.xml
+++ b/force-app/main/default/permissionsets/mcdo_Copado_Marketing_Cloud.permissionset-meta.xml
@@ -1,4 +1,4 @@
-<?xml version="1.0" encoding="UTF-8" ?>
+<?xml version="1.0" encoding="UTF-8"?>
 <PermissionSet xmlns="http://soap.sforce.com/2006/04/metadata">
     <applicationVisibilities>
         <application>mcdo_contributor</application>
@@ -109,4 +109,13 @@
         <object>copado__Pipeline_Action__c</object>
         <viewAllRecords>true</viewAllRecords>
     </objectPermissions>
+    <objectPermissions>
+        <allowCreate>false</allowCreate>
+        <allowDelete>false</allowDelete>
+        <allowEdit>false</allowEdit>
+        <allowRead>true</allowRead>
+        <modifyAllRecords>false</modifyAllRecords>
+        <object>copado__System_Property__c</object>
+        <viewAllRecords>true</viewAllRecords>
+    </objectPermissions>
 </PermissionSet>