diff --git a/nethsm/administration.rst b/nethsm/administration.rst index 6ce3e06cc2..7d07578360 100644 --- a/nethsm/administration.rst +++ b/nethsm/administration.rst @@ -1124,7 +1124,7 @@ Users with the *Administrator* `Role `__ are also ref Special rules apply to *R-Administrator* users: They can set the Namespace for new users, list all users and query the Namespace of a user. -Also, the NetHSM configuration can only be accessed by *R-Administrator* users. +Also, the NetHSM configuration can only be accessed by *R-Administrator* users. R-Administrators can not see keys in a Namespace. To be able to generate keys and users in a Namespace, the Namespace needs to be created by an *R-Administrator* user. Once the Namespace has been created, *R-Administrator* users can no longer create, delete or modify users in that Namespace. This allows to protect Namespaces' keys being accessed by R-Administrator (also indirectly by adding a new user on behalf).