diff --git a/theolive/distribution/security/token-based-security.mdx b/theolive/distribution/security/token-based-security.mdx
index ee6e1e0b7236..8e59103de7c6 100644
--- a/theolive/distribution/security/token-based-security.mdx
+++ b/theolive/distribution/security/token-based-security.mdx
@@ -52,6 +52,7 @@ The JWT token supports a custom `optiview` claim that enables fine-grained acces
 | `ch`     | `string[]` | Channel ID(s). If present, the token can exclusively be used for a channel in this list.                                                                                                                                                                                                                                                        |
 | `cc`     | `string[]` | Country code(s) in [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1) format (e.g. `"US"`, `"BE"`). If present, the token can exclusively be used for a country in this list.                                                                                                                                                       |
 | `rgn`    | `string[]` | Region code(s) using the subdivision codes defined in [ISO 3166-2](https://en.wikipedia.org/wiki/ISO_3166-2), only supported for the United States and Canada regions (e.g. `"US-CA"`, `"US-NY"`). If present, the token can exclusively be used for a region in this list. If the viewer's region cannot be determined, the request is denied. |
+| `dma`    | `number[]` | DMA (Designated Market Area) code(s), only supported for the United States and Canada (e.g. `501`, `803`). If present, the token can exclusively be used for a DMA region in this list.                                                                                                                                                         |
 | `hw`     | `string[]` | Device type(s). If present, the token can exclusively be used by a device type in this list. Possible values: `"desktop"`, `"mobile"`, `"tv"`. If the viewer's device type cannot be determined, this restriction is skipped.                                                                                                                   |
 | `tid`    | string     | Tracking ID. A group identifier string used to correlate viewers.                                                                                                                                                                                                                                                                               |
 | `cvd`    | string     | Custom viewer data. Arbitrary string attached to the session, e.g. an individual identifier to uniquely identify a viewer.                                                                                                                                                                                                                      |
@@ -77,8 +78,9 @@ The `hw` device types are derived from the viewer's `User-Agent` header:
   "exp": 1672531200,
   "optiview": {
     "ch": ["channel_1", "channel_2"],
-    "cc": ["US", "BE"],
+    "cc": ["US"],
     "rgn": ["US-CA", "US-NY"],
+    "dma": [807, 501],
     "hw": ["mobile", "tv"],
     "tid": "group-abc",
     "cvd": "viewer-98765"