diff --git a/CHANGES.md b/CHANGES.md
index 37e7a4b0dc..3606b9792e 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -9,6 +9,10 @@
 
 - Fixed output of /v1/health/queue/certificates returning wrong data
 
+## Security
+
+- Access to health API now requires authentication with an API Key with access to `health.read` scope allowed
+
 # Version 0.6.2 (PRE-RELEASE)
 
 ## Features
diff --git a/app/config/roles.php b/app/config/roles.php
index f462305d97..001ebb4909 100644
--- a/app/config/roles.php
+++ b/app/config/roles.php
@@ -24,7 +24,6 @@ $logged = [
     'projects.write',
     'locale.read',
     'avatars.read',
-    'health.read',
 ];
 
 $admins = [
@@ -62,7 +61,6 @@ return [
             'files.read',
             'locale.read',
             'avatars.read',
-            'health.read',
         ],
     ],
     ROLE_MEMBER => [