diff --git a/CHANGELOG.md b/CHANGELOG.md
index 32fdf0dea5..e7fc4ac046 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -69,6 +69,7 @@ The following sections list the changes for unreleased.
 * Enhancement - Add an API to auth-app service: [#9755](https://github.com/owncloud/ocis/pull/9755)
 * Enhancement - Bump go-micro plugins pkg: [#9756](https://github.com/owncloud/ocis/pull/9756)
 * Enhancement - Bump reva: [#9763](https://github.com/owncloud/ocis/pull/9763)
+* Enhancement - Allow querying federated user roles for sharing: [#9765](https://github.com/owncloud/ocis/pull/9765)
 * Enhancement - Refactor the connector in the collaboration service: [#9771](https://github.com/owncloud/ocis/pull/9771)
 * Enhancement - Add OCIS_ENABLE_OCM env var: [#9784](https://github.com/owncloud/ocis/pull/9784)
 
@@ -213,6 +214,17 @@ The following sections list the changes for unreleased.
    https://github.com/owncloud/ocis/pull/9714
    https://github.com/owncloud/ocis/pull/9715
 
+* Enhancement - Allow querying federated user roles for sharing: [#9765](https://github.com/owncloud/ocis/pull/9765)
+
+   When listing permissions clients can now fetch the list of available federated
+   sharing roles by sending a `GET
+   /graph/v1beta1/drives/{driveid}/items/{itemid}/permissions?$filter=@libre.graph.permissions.roles.allowedValues/rolePermissions/any(p:contains(p/condition,
+   '@Subject.UserType=="Federated"'))` request. Note that this is the only
+   supported filter expression. Federated sharing roles will be omitted from
+   requests without this filter.
+
+   https://github.com/owncloud/ocis/pull/9765
+
 * Enhancement - Refactor the connector in the collaboration service: [#9771](https://github.com/owncloud/ocis/pull/9771)
 
    This will simplify and homogenize the code around the connector