diff --git a/README.md b/README.md
index 18f3583..0ce2414 100644
--- a/README.md
+++ b/README.md
@@ -17,18 +17,19 @@ able to resolve your custom domains.
    OPNSENSE_API_KEY='...'
    OPNSENSE_API_SECRET='...'
    ```
-3. Set the permissions on this file:
+3. Give your user the `Services: Unbound DNS: Edit Host and Domain Override` permision.
+4. Set the permissions on this file:
     ```shell
    sudo chown root:root /etc/secrets/pihole-opnsense-sync
    sudo chmod 600 /etc/secrets/pihole-opnsense-sync
    ```
-4. Copy the systemd service file:
+5. Copy the systemd service file:
    ```shell
    sudo cp pihole-opnsense-sync.service /etc/systemd/system/pihole-opnsense-sync.service
    ```
    The service is configured to run as the `pihole:pihole` user.
-5. Edit the service file. You might need to modify `--opnsense` and add `--insecure`.
-6. Enable and start the service:
+6. Edit the service file. You might need to modify `--opnsense` and add `--insecure`.
+   7Enable and start the service:
    ```shell
    sudo systemctl enable --now pihole-opnsense-sync
    sleep 2