diff --git a/contributingGuides/philosophies/SECURITY.md b/contributingGuides/philosophies/SECURITY.md
index b452f0106a0b..208307a519b9 100644
--- a/contributingGuides/philosophies/SECURITY.md
+++ b/contributingGuides/philosophies/SECURITY.md
@@ -10,6 +10,7 @@ Updated rules for managing members across all types of chats in New Expensify.
 - Admins MUST NOT be able to leave or be removed from expense chats
 - Members MUST NOT be able to leave or be removed from the #announce room
 - Admins MUST NOT be able to leave or be removed from #admins
+- Auditors MUST NOT be able to leave or be removed from #admins
 - Domain members MUST NOT be able to leave or be removed from their domain chat
 - Report submitters MUST NOT be able to leave or be removed from their reports
 - Report managers MUST NOT be able to leave or be removed from their reports
@@ -32,50 +33,44 @@ Updated rules for managing members across all types of chats in New Expensify.
 - DM always has two participants. None of the participant can leave or be removed from the DM. Also no additional member can be invited to the chat.
 
 ### Workspace Rooms
-#### Workspace
-|                    | Creator | Member(Employee/User) | Admin | Auditor? |
-| :----------------: | :-----: | :-------------------: | :---: | :------: |
-|     **Invite**     |    ✅    |           ❌           |   ✅   |    ❌     |
-|     **Remove**     |    ✅    |           ❌           |   ✅   |    ❌     |
-|     **Leave**      |    ❌    |           ✅           |   ❌   |    ✅     |
-| **Can be removed** |    ❌    |           ✅           |   ✅   |    ✅     |
-
-- Creator can't leave or be removed from their own workspace
-- Admins can't leave from the workspace
-- Admins can remove other workspace admins, as well as workspace members, and invited guests
-- Creator can remove other workspace admins, as well as workspace members, and invited guests
-- Members and Auditors cannot invite or remove anyone from the workspace
-
 #### Workspace #announce room
-|                    | Member(Employee/User) | Admin | Auditor? |
-| :----------------: | :-------------------: | :---: | :------: |
-|     **Invite**     |           ❌           |   ❌   |    ❌     |
-|     **Remove**     |           ❌           |   ❌   |    ❌     |
-|     **Leave**      |           ❌           |   ❌   |    ❌     |
-| **Can be removed** |           ❌           |   ❌   |    ❌     |
+|                    | Member(Employee/User) | Admin | Auditor |
+| :----------------: | :-------------------: | :---: | :-----: |
+|     **Invite**     |           ❌           |   ❌   |    ❌    |
+|     **Remove**     |           ❌           |   ❌   |    ❌    |
+|     **Leave**      |           ❌           |   ❌   |    ❌    |
+| **Can be removed** |           ❌           |   ❌   |    ❌    |
 
 - No one can leave or be removed from the #announce room
+- Auditors are added to #announce when they join the workspace, so they can't leave or be removed from it either
+- Only workspace admins can post in #announce. Every other role, auditors included, sees the room as read-only
 
-#### Workspace #admin room
-|                    | Admin |
-| :----------------: | :---: |
-|     **Invite**     |   ❌   |
-|     **Remove**     |   ❌   |
-|     **Leave**      |   ❌   |
-| **Can be removed** |   ❌   |
+#### Workspace #admins room
+|                    | Admin | Auditor |
+| :----------------: | :---: | :-----: |
+|     **Invite**     |   ❌   |    ❌    |
+|     **Remove**     |   ❌   |    ❌    |
+|     **Leave**      |   ❌   |    ❌    |
+| **Can be removed** |   ❌   |    ❌    |
 
 - Admins can't leave or be removed from #admins
+- Auditors are added to #admins when they are given the Auditor role, and membership follows the role rather than manual invites
+- Auditors can read and comment in #admins. Unlike #announce, the room has no admins-only write capability
+- No one can leave #admins, auditors included
+- Auditors lose #admins when their role changes to one that has no #admins access. That is a role change, not a removal from the room
 
 #### Workspace rooms
-|                    | Creator | Member | Guest(outside of the workspace) |
-| :----------------: | :-----: | :----: | :-----------------------------: |
-|     **Invite**     |    ✅    |   ✅    |                ✅                |
-|     **Remove**     |    ✅    |   ✅    |                ❌                |
-|     **Leave**      |    ✅    |   ✅    |                ✅                |
-| **Can be removed** |    ✅    |   ✅    |                ✅                |
+|                    | Creator | Member | Auditor | Guest(outside of the workspace) |
+| :----------------: | :-----: | :----: | :-----: | :-----------------------------: |
+|     **Invite**     |    ✅    |   ✅    |    ✅    |                ✅                |
+|     **Remove**     |    ✅    |   ✅    |    ✅    |                ❌                |
+|     **Leave**      |    ✅    |   ✅    |    ✅    |                ✅                |
+| **Can be removed** |    ✅    |   ✅    |    ✅    |                ✅                |
 
 - Everyone can be removed/can leave from the room including creator
 - Guests are not able to remove anyone from the room
+- Auditors are added to the workspace rooms that are not private when they are given the Auditor role. Private rooms are skipped, so they join those by invitation only
+- Auditors are able to invite and remove other participants in the rooms that their role shared with them
 
 #### Expense chats
 |                    | Admin | Member(default) | Member(invited) |
@@ -90,6 +85,9 @@ Updated rules for managing members across all types of chats in New Expensify.
 - Invited members(invited by members) are not able to invite or remove from the expense chat
 - Invited members(invited by members) are able to leave the expense chat
 - Default members and admins are able to remove invited members
+- Auditors are added to every workspace expense chat, so they can see the expenses on the workspace, and they are able to comment
+- Auditors are not able to be removed from an expense chat
+- Auditors are able to leave another member's expense chat, but not their own
 
 ### Domain chat
 |                    | Member |
@@ -100,12 +98,26 @@ Updated rules for managing members across all types of chats in New Expensify.
 
 - Domain members can't leave or be removed from their domain chat
 
-4. ### Reports
-    |                    | Submitter | Manager |
-    | :----------------: | :-------: | :-----: |
-    |     **Remove**     |     ❌     |    ❌    |
-    |     **Leave**      |     ❌     |    ❌    |
-    | **Can be removed** |     ❌     |    ❌    |
+### Reports
+|                    | Submitter | Manager |
+| :----------------: | :-------: | :-----: |
+|     **Remove**     |     ❌     |    ❌    |
+|     **Leave**      |     ❌     |    ❌    |
+| **Can be removed** |     ❌     |    ❌    |
 
 - Report submitters can't leave or be removed from their reports (eg, if they are the report.accountID)
 - Report managers can't leave or be removed from their reports (eg, if they are the report.managerID)
+
+## Workspace membership
+|                    | Creator | Member(Employee/User) | Admin | Auditor |
+| :----------------: | :-----: | :-------------------: | :---: | :-----: |
+|     **Invite**     |    ✅    |           ❌           |   ✅   |    ❌    |
+|     **Remove**     |    ✅    |           ❌           |   ✅   |    ❌    |
+|     **Leave**      |    ❌    |           ✅           |   ❌   |    ✅    |
+| **Can be removed** |    ❌    |           ✅           |   ✅   |    ✅    |
+
+- Creator can't leave or be removed from their own workspace
+- Admins can't leave from the workspace
+- Admins can remove other workspace admins, as well as workspace members, and invited guests
+- Creator can remove other workspace admins, as well as workspace members, and invited guests
+- Members and Auditors cannot invite or remove anyone from the workspace