diff --git a/README.md b/README.md
index e1152eb..d709967 100644
--- a/README.md
+++ b/README.md
@@ -120,9 +120,9 @@ and the generated OAuth access token expires after 1 hour.
 
 For more information, see Tailscale's [OAuth clients](https://tailscale.com/kb/1215/oauth-clients) page, especially [Generating long-lived auth keys](https://tailscale.com/kb/1215/oauth-clients#generating-long-lived-auth-keys).
 
-If an OAuth key is used, be sure to grant the `write` Devices scope to the OAuth client.
+If an OAuth key is used, be sure to grant the `write` Auth Keys scope to the OAuth client.
 
-<img src="https://raw.githubusercontent.com/artis3n/ansible-role-tailscale/main/docs/images/oauth_scopes.png" alt="OAuth scopes" width="40%" height="40%">
+<img src="https://github.com/user-attachments/assets/f1982344-d9a1-4c55-9c93-ed0a0cc4847c" alt="OAuth scopes" width="40%" height="40%">
 
 This value should be treated as a sensitive secret.