diff --git a/changelogs/fragments/nxos_on_become.yml b/changelogs/fragments/nxos_on_become.yml
index 3ccf3c8819e..c86f2f4ab1d 100644
--- a/changelogs/fragments/nxos_on_become.yml
+++ b/changelogs/fragments/nxos_on_become.yml
@@ -1,2 +1,3 @@
 bugfixes:
 - nxos terminal plugin on_become (https://github.com/ansible/ansible/pull/39355)
+- nxos module_doc_fragments for authorize, auth_pass (https://github.com/ansible/ansible/pull/39946)
diff --git a/lib/ansible/utils/module_docs_fragments/nxos.py b/lib/ansible/utils/module_docs_fragments/nxos.py
index 44804c5505b..b0b1967ed31 100644
--- a/lib/ansible/utils/module_docs_fragments/nxos.py
+++ b/lib/ansible/utils/module_docs_fragments/nxos.py
@@ -62,6 +62,25 @@ options:
             value of environment variable C(ANSIBLE_NET_PASSWORD) will be used instead.
         required: false
         default: null
+      authorize:
+        description:
+          - Instructs the module to enter privileged mode on the remote device
+            before sending any commands.  If not specified, the device will
+            attempt to execute all commands in non-privileged mode. If the value
+            is not specified in the task, the value of environment variable
+            C(ANSIBLE_NET_AUTHORIZE) will be used instead.
+        type: bool
+        default: no
+        choices: ['yes', 'no']
+        version_added: 2.5.3
+      auth_pass:
+        description:
+          - Specifies the password to use if required to enter privileged mode
+            on the remote device.  If I(authorize) is false, then this argument
+            does nothing. If the value is not specified in the task, the value of
+            environment variable C(ANSIBLE_NET_AUTH_PASS) will be used instead.
+        default: none
+        version_added: 2.5.3
       timeout:
         description:
           - Specifies the timeout in seconds for communicating with the network device