diff --git a/docs/operations/ci/adding_cico_tenant/adding-duffy-tenant.md b/docs/operations/ci/adding_cico_tenant/adding-duffy-tenant.md
index 31c31e3..dc4cc02 100644
--- a/docs/operations/ci/adding_cico_tenant/adding-duffy-tenant.md
+++ b/docs/operations/ci/adding_cico_tenant/adding-duffy-tenant.md
@@ -79,6 +79,12 @@ When committed to git and pushed, one can play the duffy role with the config ta
 Once tenant is imported (apikey and ssh public key(s)) and ansible duffy role applied, the tenant can either use `icico` client (in compatibility mode) or already use the new duffy client (see below)
 
 
+## Artifacts storage box
+
+CI tenants are allowed to upload artifacts to one storage box, so we need to allow them to upload/rsync to it.
+It's all controlled by the `artifacts_projects_list` list in ansible (host_vars) so don't forget to also add project and ssh public keys there too
+
+
 ## Duffy client configuration (external)
 
 ### Connect to the host that will have duffy client