diff --git a/doc/radosgw/config.rst b/doc/radosgw/config.rst
index f2dc2dfaca6..3b6585151b9 100644
--- a/doc/radosgw/config.rst
+++ b/doc/radosgw/config.rst
@@ -55,7 +55,7 @@ See the `Cephx Guide`_ for additional details on Ceph authentication.
 #. Add capabilities to the key. See `Configuration Reference - Pools`_ for details
    on the effect of write permissions for the monitor and creating pools. ::
 
-	sudo ceph-authtool -n client.radosgw.gateway --cap osd 'allow rwx' --cap mon 'allow rw' /etc/ceph/ceph.client.radosgw.keyring
+	sudo ceph-authtool -n client.radosgw.gateway --cap osd 'allow rwx' --cap mon 'allow rwx' /etc/ceph/ceph.client.radosgw.keyring
 
 
 #. Once you have created a keyring and key to enable the Ceph Object Gateway 
diff --git a/doc/radosgw/federated-config.rst b/doc/radosgw/federated-config.rst
index ab7b7ee4b2b..5c7c91a025f 100644
--- a/doc/radosgw/federated-config.rst
+++ b/doc/radosgw/federated-config.rst
@@ -179,8 +179,8 @@ each node containing an instance.
 #. Add capabilities to each key. See `Configuration Reference - Pools`_ for details
    on the effect of write permissions for the monitor and creating pools. ::
 
-	sudo ceph-authtool -n client.radosgw.us-east-1 --cap osd 'allow rwx' --cap mon 'allow rw' /etc/ceph/ceph.client.radosgw.keyring
-	sudo ceph-authtool -n client.radosgw.us-west-1 --cap osd 'allow rwx' --cap mon 'allow rw' /etc/ceph/ceph.client.radosgw.keyring
+	sudo ceph-authtool -n client.radosgw.us-east-1 --cap osd 'allow rwx' --cap mon 'allow rwx' /etc/ceph/ceph.client.radosgw.keyring
+	sudo ceph-authtool -n client.radosgw.us-west-1 --cap osd 'allow rwx' --cap mon 'allow rwx' /etc/ceph/ceph.client.radosgw.keyring
 
 
 #. Once you have created a keyring and key to enable the Ceph Object Gateway