diff --git a/cmd/aigw/testdata/cross_namespace_secret_grant.yaml b/cmd/aigw/testdata/cross_namespace_secret_grant.yaml
index 74e0624852..cc13832352 100644
--- a/cmd/aigw/testdata/cross_namespace_secret_grant.yaml
+++ b/cmd/aigw/testdata/cross_namespace_secret_grant.yaml
@@ -17,3 +17,4 @@ spec:
   to:
     - group: ""
       kind: Secret
+      name: shared-openai-apikey
diff --git a/site/docs/capabilities/llm-integrations/connect-providers.md b/site/docs/capabilities/llm-integrations/connect-providers.md
index eb2ab1d020..cb9f941aeb 100644
--- a/site/docs/capabilities/llm-integrations/connect-providers.md
+++ b/site/docs/capabilities/llm-integrations/connect-providers.md
@@ -256,8 +256,11 @@ spec:
   to:
     - group: ""
       kind: Secret
+      name: openai-secret # the Secret's name
 ```
 
+The `name` field limits the grant to that one Secret. Without it, the grant covers every Secret in the namespace. To allow several Secrets, add a `to` entry for each.
+
 With `aigw run`, put the ReferenceGrant in the configuration file.
 
 #### Security Best Practices