diff --git a/docs/resources/sqlserverflex_user.md b/docs/resources/sqlserverflex_user.md
index e616e272..20a3b161 100644
--- a/docs/resources/sqlserverflex_user.md
+++ b/docs/resources/sqlserverflex_user.md
@@ -34,12 +34,12 @@ import {
 
 - `instance_id` (String) ID of the SQLServer Flex instance.
 - `project_id` (String) STACKIT project ID to which the instance is associated.
+- `roles` (Set of String) Database access levels for the user. The values for the default roles are: `##STACKIT_DatabaseManager##`, `##STACKIT_LoginManager##`, `##STACKIT_ProcessManager##`, `##STACKIT_ServerManager##`, `##STACKIT_SQLAgentManager##`, `##STACKIT_SQLAgentUser##`
 - `username` (String) Username of the SQLServer Flex instance.
 
 ### Optional
 
 - `region` (String)
-- `roles` (Set of String) Database access levels for the user. The values for the default roles are: `##STACKIT_DatabaseManager##`, `##STACKIT_LoginManager##`, `##STACKIT_ProcessManager##`, `##STACKIT_ServerManager##`, `##STACKIT_SQLAgentManager##`, `##STACKIT_SQLAgentUser##`
 
 ### Read-Only
 
diff --git a/stackit/internal/services/sqlserverflex/user/resource.go b/stackit/internal/services/sqlserverflex/user/resource.go
index 6b10e598..153750c7 100644
--- a/stackit/internal/services/sqlserverflex/user/resource.go
+++ b/stackit/internal/services/sqlserverflex/user/resource.go
@@ -178,7 +178,7 @@ func (r *userResource) Schema(_ context.Context, _ resource.SchemaRequest, resp
 			"roles": schema.SetAttribute{
 				Description: descriptions["roles"],
 				ElementType: types.StringType,
-				Optional:    true,
+				Required:    true,
 				PlanModifiers: []planmodifier.Set{
 					setplanmodifier.RequiresReplace(),
 				},