Skip to content

Commit e690bf9

Browse files
chore:Update groups rules (#98)
* Update section for clarity * Change however to but * Copy edit everything * Revert that line, previous was more clear
1 parent d8b0ad9 commit e690bf9

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

docs/studio/groups/group-rules.mdx

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -12,10 +12,10 @@ A **group rule** defines the roles and associated resources that determine what
1212

1313
When a group rule doesn't have any explicit resources, the group will always have access to all resources within the organization.
1414

15-
In the same way, if a rule is limited to a single resource and that resource is deleted from the organization, the rule will fallback to having access to all resources within the organization.
15+
In the same way, if a rule is limited to a single resource and that resource is deleted from the organization, the rule will fall back to granting access to all resources in the organization.
1616

1717
<Note>
18-
Unlike limiting resources, if a group doesn't have any rule assigned, this will result in the group effectively not having access to any resource.
18+
Unlike assigning specific resources, if a group doesn't have any rule assigned, this will result in the group effectively not having access to any resource.
1919
</Note>
2020

2121
## Roles
@@ -26,17 +26,17 @@ You can assign multiple roles to a group using the `Add rule` button. If no grou
2626
<img src="/images/studio/group-role-selector.png" />
2727
</Frame>
2828

29-
Each role can be added only once per group. After assigning a role, you may associate it with multiple resources, but you cannot create additional rules for the same role.
29+
Each role type can only be added once per group. For example, you can assign the `Organization Admin` and `Organization Viewer` roles in the same group, but you cannot assign the same role type more than once. You could also add a `Graph Admin` role to that group, as long as each role type appears only once.
3030

31-
The order in which the roles are assigned to the role doesn't have any effect when performing checks. For example, given the following group:
31+
The order in which roles are assigned does not affect how access checks are performed. For example, given the following group:
3232

3333
<Frame>
3434
<img src="/images/studio/group-example1.png" />
3535
</Frame>
3636

3737
The members for this group will have **Admin** access to the `default` namespace and **Viewer** to the `test` and any other namespace that may exist in the organization.
3838

39-
If the namespace `default` is deleted, the **Admin** would take priority as the limitation no-longer exists.
39+
If the namespace `default` is deleted, the **Admin** role is no longer scoped and will apply to all resources.
4040

4141
With this in mind, members of the following example will have **Organization Admin** access to all resources.
4242

@@ -53,7 +53,7 @@ These roles apply at the organization level and cannot be limited to specific re
5353
3. **API Key Manager** — Permissions to create, modify, and delete API keys.
5454
4. **Viewer** — Read-only access to all organizational objects.
5555

56-
An organization **Developer** have access to manage namespaces, create and publish graphs while an **Admin** is able to perform these operations on top of managing the organization settings.
56+
An organization **Developer** can manage namespaces and publish graphs. An **Admin** can do the same, plus manage organization-wide settings.
5757

5858
### Namespace Roles
5959

@@ -96,7 +96,7 @@ If no subgraph resources are assigned, the group will have access to all subgrap
9696
<img src="/images/studio/update-group-screen.png" />
9797
</Frame>
9898

99-
Resources represent the entities available within your organization, including but not limited to:
99+
Resources represent entities in your organization, including but not limited to:
100100

101101
- Namespaces
102102
- Federated Graphs

0 commit comments

Comments
 (0)