diff --git a/CHANGELOG.md b/CHANGELOG.md
index d18244ee73..3a17d66aa0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ The following sections list the changes for unreleased.
 * Enhancement - Introduce clientlog service: [#7217](https://github.com/owncloud/ocis/pull/7217)
 * Enhancement - SSE for messaging: [#6992](https://github.com/owncloud/ocis/pull/6992)
 * Enhancement - Keyword Query Language (KQL) search syntax: [#7212](https://github.com/owncloud/ocis/pull/7212)
+* Enhancement - Proxy uses service accounts for provisioning: [#7240](https://github.com/owncloud/ocis/pull/7240)
 * Enhancement - Introduce service accounts: [#6427](https://github.com/owncloud/ocis/pull/6427)
 
 ## Details
@@ -94,10 +95,20 @@ The following sections list the changes for unreleased.
    https://github.com/owncloud/ocis/pull/7043
    https://github.com/owncloud/web/pull/9653
 
+* Enhancement - Proxy uses service accounts for provisioning: [#7240](https://github.com/owncloud/ocis/pull/7240)
+
+   The proxy service now uses a service account for provsioning task, like role assignment and
+   user auto-provisioning. This cleans up some technical debt that required us to mint reva tokes
+   inside the proxy service.
+
+   https://github.com/owncloud/ocis/issues/5550
+   https://github.com/owncloud/ocis/pull/7240
+
 * Enhancement - Introduce service accounts: [#6427](https://github.com/owncloud/ocis/pull/6427)
 
    Introduces service accounts to avoid impersonating users in async processes
 
+   https://github.com/owncloud/ocis/issues/5550
    https://github.com/owncloud/ocis/pull/6427
 # Changelog for [4.0.0] (2023-08-21)