diff --git a/baton/workato.mdx b/baton/workato.mdx
index c7954941..930d9648 100644
--- a/baton/workato.mdx
+++ b/baton/workato.mdx
@@ -8,13 +8,20 @@ sidebarTitle: Workato
 
 ## Capabilities
 
-| Resource     | Sync | Provision |
+| Resource           | Sync | Provision |
 | :--- | :--- | :--- |
-| Accounts     | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   |           |       
-| Privileges   | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   |           | 
-| Roles        | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>        | 
-| Folders      | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   |           | 
-| Projects     | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   |           | 
+| Accounts           | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   |           |       
+| Privileges         | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   |           | 
+| Roles              | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>        | 
+| Environment Roles  | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>        | 
+| Folders            | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   |           | 
+| Projects           | <Icon icon="square-check" iconType="solid"  color="#c937ae"/>   |           | 
+
+<Note>
+**Environment Roles** are only available in workspaces that use the RBAC v2 model. If your workspace uses the legacy role model, environment roles do not apply.
+
+Workato enforces one environment role per collaborator per environment. Granting a new environment role automatically replaces the collaborator's existing role in that environment. Direct revocation of an environment role is not supported — to change a collaborator's role, grant the replacement role instead.
+</Note>
 
 ## Gather Workato credentials 
 
@@ -32,16 +39,23 @@ Give the new client role a name, such as "C1 integration role".
 <Step>
 Select the following endpoints: 
 
-    | Area         | Section              | Action                      | API Endpoint                       |
+    | Area         | Section              | Action                        | API Endpoint                       |
     | :--- | :--- | :--- | :--- |
-    | **Projects** | Projects & Folders   | List projects               | `GET /api/projects`                |
-    |              | Projects & Folders   | List folders                | `GET /api/folders`                 |
-    | **Admin**    | Collaborators        | Get collaborators           | `GET /api/members`                 |
-    |              | Collaborators        | Get collaborator            | `GET /api/members/:id`             |
-    |              | Collaborators        | Update collaborators' roles* | `PUT /api/members/:id`             |
-    |              | Collaborators        | Get collaborator privileges | `GET /api/members/:id/privileges`  |
-    |              | Collaborator roles   | List non-system roles       | `GET /api/roles`                   |
-    *If you don't want to use C1 to provision role assignments, you can skip **Update collaborator’s roles**.
+    | **Projects** | Projects & Folders   | List projects                 | `GET /api/projects`                |
+    |              | Projects & Folders   | List folders                  | `GET /api/folders`                 |
+    | **Admin**    | Collaborators        | Get collaborators             | `GET /api/members`                 |
+    |              | Collaborators        | Get collaborator              | `GET /api/members/:id`             |
+    |              | Collaborators        | Update collaborators’ roles*  | `PUT /api/members/:id`             |
+    |              | Collaborators        | Get collaborator privileges   | `GET /api/members/:id/privileges`  |
+    |              | Collaborator roles   | List non-system roles         | `GET /api/roles`                   |
+    |              | Environment roles    | List environment roles†       | `GET /api/environment_roles`       |
+    |              | Environment roles    | Get environment role†‡        | `GET /api/environment_roles/:id`   |
+
+    *If you don’t want to use C1 to provision role assignments, you can skip **Update collaborator’s roles** and **Get environment role**.
+
+    †**List environment roles** and **Get environment role** are only available in workspaces that use the RBAC v2 model (environment roles). If your workspace uses the legacy role model, these permissions do not appear in the UI and you can skip them.
+
+    ‡**Get environment role** is required only if you want C1 to provision environment role assignments.
 </Step>
 <Step>
 Save the new role.  
@@ -86,6 +100,8 @@ You'll also need to specify the location of your Workato data center. Workato di
 * JP Data Center: https://app.jp.workato.com/api/
 * SG Data Center: https://app.sg.workato.com/api/
 * AU Data Center: https://app.au.workato.com/api/
+* IL Data Center: https://app.il.workato.com/api/
+* Sandbox: https://app.trial.workato.com/api/
 
 **Done.** Next, move on to the connector configuration instructions. 
 
@@ -134,7 +150,7 @@ Find the **Settings** area of the page and click **Edit**.
 Enter the API token in the **API key** field. 
 </Step>
 <Step>
-In the **Data center** field, enter one of `us`, `eu`, `jp`, `sg`, or `au` to identify the location of your Workato data center. The default is `us`. 
+In the **Data center** field, enter one of `us`, `eu`, `jp`, `sg`, `au`, `il`, or `sandbox` to identify the location of your Workato data center. The default is `us`. 
 </Step>
 <Step>
 In the **Environment** field, enter one of `dev`, `test`, or `prod` to identify your Workato environment. The default is `dev`. 
@@ -220,7 +236,7 @@ stringData:
   
   # Workato credentials
   BATON_WORKATO_API_KEY: <Workato API key>
-  BATON_WORKATO_DATA_CENTER: <Your Workato data center (one of us, eu, jp, sg, or au). Default is us.>
+  BATON_WORKATO_DATA_CENTER: <Your Workato data center (one of us, eu, jp, sg, au, il, or sandbox). Default is us.>
   BATON_WORKATO_ENV: <Your Workato environment (one of dev, test, or prod). Default is 'dev'>
 
   # Optional: include if you don't want to sync custom Workato roles