diff --git a/CHANGELOG.md b/CHANGELOG.md
index 091c4a9..94e4fc3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,14 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-13 — Roles, under the organizations `web 0.177.0`
+
+**Organization roles moved back under Organizations in the Admin Center**, where the menu calls them
+**Roles**: the group title already says which kind. Everywhere without a group — the search, the
+page title, the admin roles editor — they are still called organization roles.
+
+Update the web image. No API or agent update is required.
+
 ## 2026-10-13 — The old access columns are removed `api 0.147.0`
 
 **This release deletes data on purpose, once, and asks you to confirm it.** It removes what the old