diff --git a/MdePkg/Include/Protocol/UserCredential.h b/MdePkg/Include/Protocol/UserCredential.h
index ef0ac352aa..4b13960493 100644
--- a/MdePkg/Include/Protocol/UserCredential.h
+++ b/MdePkg/Include/Protocol/UserCredential.h
@@ -189,9 +189,11 @@ typedef EFI_USER_INFO_ACCESS_CONTROL EFI_USER_INFO_ACCESS_POLICY;
 ///
 #define EFI_USER_INFO_ACCESS_FORBID_LOAD              0x00000001
 ///
-///
 /// Permits the user from booting or loading executables from the specified device path or any child 
 /// device paths.
+/// Note: in-consistency between code and the UEFI 2.3 specification here.
+/// The definition EFI_USER_INFO_ACCESS_PERMIT_BOOT in the specification should be typo and wait for
+/// spec update.
 ///
 #define EFI_USER_INFO_ACCESS_PERMIT_LOAD              0x00000002
 ///
diff --git a/MdePkg/Include/Protocol/UserManager.h b/MdePkg/Include/Protocol/UserManager.h
index fc9698acc7..484c11db29 100644
--- a/MdePkg/Include/Protocol/UserManager.h
+++ b/MdePkg/Include/Protocol/UserManager.h
@@ -297,6 +297,9 @@ EFI_STATUS
   handle, point UserInfo at a NULL. Each subsequent call will retrieve another user information 
   record handle until there are no more, at which point UserInfo will point to NULL. 
 
+  Note: in-consistency between code and the UEFI 2.3 specification that the type of the User parameter
+  is EFI_USER_PROFILE_HANDLE. It should be spec error and wait for spec update.
+
   @param[in]     This      Points to this instance of the EFI_USER_MANAGER_PROTOCOL.
   @param[in]     User      Handle of the user whose information will be deleted.
   @param[in,out] UserInfo  Handle of the user information to remove.