diff --git a/README.md b/README.md
index f93a68f..ee92838 100644
--- a/README.md
+++ b/README.md
@@ -245,6 +245,8 @@ down the privileges required for ESM the following [ACL policy rules][rules]
 can be used:
 
 ```hcl
+operator = read
+
 agent_prefix "" {
   policy = "read"
 }