diff --git a/lib/App/Netdisco/Util/Node.pm b/lib/App/Netdisco/Util/Node.pm
index f603ca5e..1f8dbe24 100644
--- a/lib/App/Netdisco/Util/Node.pm
+++ b/lib/App/Netdisco/Util/Node.pm
@@ -129,29 +129,8 @@ is undefined or empty, then C<check_node_no> also returns false.
 
  print "rejected!" if check_node_no($ip, 'nbtstat_no');
 
-There are several options for what C<$setting_name> can contain:
-
-=over 4
-
-=item *
-
-Hostname, IP address, IP prefix
-
-=item *
-
-IP address range, using a hyphen and no whitespace
-
-=item *
-
-Regular Expression in YAML format which will match the node DNS name, e.g.:
-
- - !!perl/regexp ^sep0.*$
-
-=back
-
-To simply match all nodes, use "C<any>" or IP Prefix "C<0.0.0.0/0>". All
-regular expressions are anchored (that is, they must match the whole string).
-To match no nodes we recommend an entry of "C<localhost>" in the setting.
+There are several options for what C<$setting_name> can contain. See
+L<App::Netdisco::Util::Permission> for the details.
 
 =cut
 
@@ -172,29 +151,8 @@ is undefined or empty, then C<check_node_only> also returns true.
 
  print "rejected!" unless check_node_only($ip, 'nbtstat_only');
 
-There are several options for what C<$setting_name> can contain:
-
-=over 4
-
-=item *
-
-Hostname, IP address, IP prefix
-
-=item *
-
-IP address range, using a hyphen and no whitespace
-
-=item *
-
-Regular Expression in YAML format which will match the node DNS name, e.g.:
-
- - !!perl/regexp ^sep0.*$
-
-=back
-
-To simply match all nodes, use "C<any>" or IP Prefix "C<0.0.0.0/0>". All
-regular expressions are anchored (that is, they must match the whole string).
-To match no nodes we recommend an entry of "C<localhost>" in the setting.
+There are several options for what C<$setting_name> can contain. See
+L<App::Netdisco::Util::Permission> for the details.
 
 =cut
 
diff --git a/lib/App/Netdisco/Util/Permission.pm b/lib/App/Netdisco/Util/Permission.pm
index 0ee8dce1..d36ebe39 100644
--- a/lib/App/Netdisco/Util/Permission.pm
+++ b/lib/App/Netdisco/Util/Permission.pm
@@ -32,10 +32,6 @@ Given a Device or IP address, compares it to the items in C<< \@config >>
 then returns true or false. You can control whether any item must match or
 all must match, and items can be negated to invert the match logic.
 
-Normally you use C<< *_no >> and C<< *_only >> settings, passing the name of
-the configuration setting to load. This helper instead requires not the name
-of the setting, but its value (a list of network or device identifiers).
-
 There are several options for what C<< \@config >> can contain:
 
 =over 4
@@ -62,8 +58,8 @@ C<vendor> (with enforced begin/end regexp anchors).
 
 =item *
 
-"C<op:and>" to require all items to match (or not if negated) the provided IP
-or device. Note that this includes IP address version mismatches (v4-v6).
+"C<op:and>" to require all items to match (or not match) the provided IP or
+device. Note that this includes IP address version mismatches (v4-v6).
 
 =back