diff --git a/changelog/unreleased/use-roles-cache.md b/changelog/unreleased/use-roles-cache.md
new file mode 100644
index 0000000000..b492e705b9
--- /dev/null
+++ b/changelog/unreleased/use-roles-cache.md
@@ -0,0 +1,5 @@
+Change: We make use of the roles cache to enforce permission checks
+
+The roles cache and its cache update middleware are used to make permission checks possible. The permission checks take place in the accounts handler.
+
+https://github.com/owncloud/ocis-accounts/pull/100