diff --git a/changelogs/fragments/361-k8s_exec-permission-hint.yaml b/changelogs/fragments/361-k8s_exec-permission-hint.yaml
new file mode 100644
index 00000000..08263ae2
--- /dev/null
+++ b/changelogs/fragments/361-k8s_exec-permission-hint.yaml
@@ -0,0 +1,2 @@
+minor_changes:
+  - k8s_exec - add a note about required permissions for the module (https://github.com/ansible-collections/community.kubernetes/issues/339).
diff --git a/plugins/modules/k8s_exec.py b/plugins/modules/k8s_exec.py
index e540b9b6..a2542b25 100644
--- a/plugins/modules/k8s_exec.py
+++ b/plugins/modules/k8s_exec.py
@@ -31,7 +31,9 @@ requirements:
   - "PyYAML >= 3.11"
 
 notes:
-- Return code C(return_code) for the command executed is added in output in version 1.0.0.
+  - Return code C(return_code) for the command executed is added in output in version 1.0.0.
+  - The authenticated user must have at least read access to the pods resource and write access to the pods/exec resource.
+
 options:
   proxy:
     description: