diff --git a/docs/data-sources/kafka.md b/docs/data-sources/kafka.md
index f2c8b3a45..f652b8a5b 100644
--- a/docs/data-sources/kafka.md
+++ b/docs/data-sources/kafka.md
@@ -90,6 +90,7 @@ Read-Only:
 Read-Only:
 
 - `additional_backup_regions` (List of String)
+- `aiven_kafka_topic_messages` (Boolean)
 - `custom_domain` (String)
 - `ip_filter` (List of String)
 - `ip_filter_object` (List of Object) (see [below for nested schema](#nestedobjatt--kafka_user_config--ip_filter_object))
diff --git a/docs/resources/kafka.md b/docs/resources/kafka.md
index 4ad8b2c34..9ffd767d1 100644
--- a/docs/resources/kafka.md
+++ b/docs/resources/kafka.md
@@ -89,6 +89,7 @@ resource "aiven_kafka" "kafka1" {
 Optional:
 
 - `additional_backup_regions` (List of String) Additional Cloud Regions for Backup Replication.
+- `aiven_kafka_topic_messages` (Boolean) Allow access to read Kafka topic messages in the Aiven Console and REST API.
 - `custom_domain` (String) Serve the web frontend using a custom CNAME pointing to the Aiven DNS name.
 - `ip_filter` (List of String, Deprecated) Allow incoming connections from CIDR address block, e.g. '10.20.0.0/16'.
 - `ip_filter_object` (Block List, Max: 1024) Allow incoming connections from CIDR address block, e.g. '10.20.0.0/16'. (see [below for nested schema](#nestedblock--kafka_user_config--ip_filter_object))
diff --git a/internal/schemautil/userconfig/dist/service_types.go b/internal/schemautil/userconfig/dist/service_types.go
index 53bf02569..b44382efb 100644
--- a/internal/schemautil/userconfig/dist/service_types.go
+++ b/internal/schemautil/userconfig/dist/service_types.go
@@ -2296,6 +2296,11 @@ func ServiceTypeKafka() *schema.Schema {
 			Optional:    true,
 			Type:        schema.TypeList,
 		},
+		"aiven_kafka_topic_messages": {
+			Description: "Allow access to read Kafka topic messages in the Aiven Console and REST API.",
+			Optional:    true,
+			Type:        schema.TypeBool,
+		},
 		"custom_domain": {
 			Description: "Serve the web frontend using a custom CNAME pointing to the Aiven DNS name.",
 			Optional:    true,