diff --git a/.changeset/weak-bags-behave.md b/.changeset/weak-bags-behave.md
index 25a0147917..57bf1903f1 100644
--- a/.changeset/weak-bags-behave.md
+++ b/.changeset/weak-bags-behave.md
@@ -6,7 +6,8 @@
 '@backstage/plugin-scaffolder': minor
 ---
 
-BREAKING :
+BREAKING `/alpha`: Converted `scaffolder.task.read` and `scaffolder.task.cancel` into Resource Permissions.
 
-- Converted `scaffolder.task.read` and `scaffolder.task.cancel` into Resource Permissions.
-- Added a new scaffolder rule `isTaskOwner` for `scaffolder.task.read` and `scaffolder.task.cancel` to allow for conditional permission policies such as restricting access to tasks and task events based on task creators.
+BREAKING `/alpha`: Added a new scaffolder rule `isTaskOwner` for `scaffolder.task.read` and `scaffolder.task.cancel` to allow for conditional permission policies such as restricting access to tasks and task events based on task creators.
+
+BREAKING `/alpha`: Retrying a task now requires both `scaffolder.task.read` and `scaffolder.task.create` permissions, replacing the previous requirement of `scaffolder.task.read` and `scaffolder.task.cancel`.
diff --git a/plugins/scaffolder-backend/src/service/router.ts b/plugins/scaffolder-backend/src/service/router.ts
index 15aed8a4fb..6e476d9a19 100644
--- a/plugins/scaffolder-backend/src/service/router.ts
+++ b/plugins/scaffolder-backend/src/service/router.ts
@@ -709,7 +709,7 @@ export async function createRouter(
         const credentials = await httpAuth.credentials(req);
         const task = await taskBroker.get(taskId);
 
-        // Requires both read and cancel permissions
+        // Requires both read and create permissions
         await checkPermission({
           credentials,
           permissions: [taskCreatePermission],