diff --git a/assets/scss/_content_project.scss b/assets/scss/_content_project.scss
index 6af5b469..b3a47db6 100644
--- a/assets/scss/_content_project.scss
+++ b/assets/scss/_content_project.scss
@@ -2,115 +2,168 @@
// Style Markdown content
//
-h1, h2, h3, h4, h5, h6 {
- font-family: "Qanelas Soft", sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";
+h1,
+h2,
+h3,
+h4,
+h5,
+h6 {
+ font-family:
+ "Qanelas Soft",
+ sans-serif,
+ -apple-system,
+ BlinkMacSystemFont,
+ "Segoe UI",
+ Roboto,
+ "Helvetica Neue",
+ Arial,
+ "Apple Color Emoji",
+ "Segoe UI Emoji",
+ "Segoe UI Symbol";
}
+
.td-content {
- order: 1;
-
- p,
- li,
- td {
- font-weight: $font-weight-body-text;
- }
-
- > h1 {
- font-family: "Qanelas Soft", sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";
- font-weight: $font-weight-bold;
- margin-bottom: 1rem;
- color: $casper;
- }
-
- > h2 {
- font-family: "Qanelas Soft", sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";
- margin-bottom: 1rem;
- color: $casper;
- }
-
- > h2:not(:first-child) {
- margin-top: 3rem;
- color: $casper;
- }
-
- > h2 + h3 {
- margin-top: 1rem;
- }
-
- > h3,
- > h4,
- > h5,
- > h6 {
- font-family: "Qanelas Soft", sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";
- margin-bottom: 1rem;
- margin-top: 2rem;
- color: $lightslategray;
- & a {
- color: $primary;
- & :hover {
- color: $white;
- }
- }
- }
+ order: 1;
- img {
- @extend .img-fluid;
- }
-
- table {
- @extend .td-table;
- }
-
- blockquote {
- padding: 0 0 0 1rem;
- margin-bottom: $spacer;
- color: $gray-600;
- border-left: 6px solid $secondary;
- }
-
- ul li,
- ol li {
- margin-bottom: 0.25rem;
- }
-
- strong {
- font-weight: $font-weight-bold;
- }
-
- .footnotes,
- > .alert,
- > .highlight,
- > .lead,
- > .td-table,
- > blockquote,
- > dl dd,
- > h1,
- > h2,
- > ol,
- > p,
- > pre,
- > ul {
- @extend .td-max-width-on-larger-screens;
- }
-
- .alert:not(:first-child) {
- margin-top: 2 * $spacer;
- margin-bottom: 2 * $spacer;
- }
-
- .lead {
- margin-bottom: 1.5rem;
- }
+ p,
+ li,
+ td {
+ font-weight: $font-weight-body-text;
+ }
+
+ >h1 {
+ font-family:
+ "Qanelas Soft",
+ sans-serif,
+ -apple-system,
+ BlinkMacSystemFont,
+ "Segoe UI",
+ Roboto,
+ "Helvetica Neue",
+ Arial,
+ "Apple Color Emoji",
+ "Segoe UI Emoji",
+ "Segoe UI Symbol";
+ font-weight: $font-weight-bold;
+ margin-bottom: 1rem;
+ color: $casper;
+ }
+
+ >h2 {
+ font-family:
+ "Qanelas Soft",
+ sans-serif,
+ -apple-system,
+ BlinkMacSystemFont,
+ "Segoe UI",
+ Roboto,
+ "Helvetica Neue",
+ Arial,
+ "Apple Color Emoji",
+ "Segoe UI Emoji",
+ "Segoe UI Symbol";
+ margin-bottom: 1rem;
+ color: $casper;
}
-
- .td-title {
+
+ >h2:not(:first-child) {
+ margin-top: 3rem;
+ color: $casper;
+ }
+
+ >h2+h3 {
margin-top: 1rem;
- margin-bottom: 0.5rem;
-
- @include media-breakpoint-up(sm) {
- font-size: 3rem;
+ }
+
+ >h3,
+ >h4,
+ >h5,
+ >h6 {
+ font-family:
+ "Qanelas Soft",
+ sans-serif,
+ -apple-system,
+ BlinkMacSystemFont,
+ "Segoe UI",
+ Roboto,
+ "Helvetica Neue",
+ Arial,
+ "Apple Color Emoji",
+ "Segoe UI Emoji",
+ "Segoe UI Symbol";
+ margin-bottom: 1rem;
+ margin-top: 2rem;
+ color: $lightslategray;
+
+ & a {
+ color: $primary;
+
+ & :hover {
+ color: $white;
+ }
}
}
+ img {
+ width: 100%;
+ @extend .img-fluid;
+ }
+
+ table {
+ @extend .td-table;
+ }
+
+ blockquote {
+ padding: 0 0 0 1rem;
+ margin-bottom: $spacer;
+ color: $gray-600;
+ border-left: 6px solid $secondary;
+ }
+
+ ul li,
+ ol li {
+ margin-bottom: 0.25rem;
+ }
+
+ strong {
+ font-weight: $font-weight-bold;
+ }
+
+ .footnotes,
+ >.alert,
+ >.highlight,
+ >.lead,
+ >.td-table,
+ >blockquote,
+ >dl dd,
+ >h1,
+ >h2,
+ >ol,
+ >p,
+ >pre,
+ >ul {
+ @extend .td-max-width-on-larger-screens;
+ }
+
+ .alert:not(:first-child) {
+ margin-top: 2 * $spacer;
+ margin-bottom: 2 * $spacer;
+ }
+
+ .lead {
+ margin-bottom: 1.5rem;
+ }
+}
+
+.td-title {
+ margin-top: 1rem;
+ margin-bottom: 0.5rem;
+
+ @include media-breakpoint-up(sm) {
+ font-size: 3rem;
+ }
+}
+
/* width */
::-webkit-scrollbar {
width: 8px;
@@ -147,7 +200,7 @@ h1, h2, h3, h4, h5, h6 {
margin-bottom: 1rem;
color: #cccccc;
vertical-align: top;
- border-color:rgba(0, 179, 159, 0.33);
+ border-color: rgba(0, 179, 159, 0.33);
}
.td-initial thead {
@@ -156,7 +209,12 @@ h1, h2, h3, h4, h5, h6 {
unicode-bidi: isolate;
}
-.td-initial thead, tbody, tfoot, tr, td, th {
+.td-initial thead,
+tbody,
+tfoot,
+tr,
+td,
+th {
border-color: rgba(0, 179, 159, 0.33);
border-style: solid;
border-width: 0;
@@ -179,7 +237,7 @@ h1, h2, h3, h4, h5, h6 {
unicode-bidi: isolate;
max-width: 300px;
overflow-wrap: break-word;
- padding: .5rem;
+ padding: 0.5rem;
background-color: #00000000;
border-bottom-width: 1px;
box-shadow: inset 0 0 0 9999px rgba(0, 0, 0, 0.05);
@@ -191,7 +249,7 @@ h1, h2, h3, h4, h5, h6 {
font-weight: bold;
text-align: -internal-center;
unicode-bidi: isolate;
- padding: .5rem;
+ padding: 0.5rem;
background-color: transparent;
border-bottom-width: 1px;
box-shadow: inset 0 0 0 9999px rgba(0, 0, 0, 0.05);
@@ -200,4 +258,4 @@ h1, h2, h3, h4, h5, h6 {
.table-container {
overflow-x: auto;
max-width: 100%;
-}
\ No newline at end of file
+}
diff --git a/content/en/cloud/identity/images/organization-administrator-and-organization-billing-manager.svg b/content/en/cloud/identity/images/organization-administrator-and-organization-billing-manager.svg
index 0300d62d..a331aa76 100644
--- a/content/en/cloud/identity/images/organization-administrator-and-organization-billing-manager.svg
+++ b/content/en/cloud/identity/images/organization-administrator-and-organization-billing-manager.svg
@@ -1 +1 @@
-
\ No newline at end of file
+
\ No newline at end of file
diff --git a/content/en/cloud/identity/images/team-admins-and-team-managers.svg b/content/en/cloud/identity/images/team-admins-and-team-managers.svg
index 60a0b152..a12302fd 100644
--- a/content/en/cloud/identity/images/team-admins-and-team-managers.svg
+++ b/content/en/cloud/identity/images/team-admins-and-team-managers.svg
@@ -1 +1 @@
-
\ No newline at end of file
+
\ No newline at end of file
diff --git a/content/en/cloud/identity/images/workspace-administrator-and-workspace-manager.svg b/content/en/cloud/identity/images/workspace-administrator-and-workspace-manager.svg
new file mode 100644
index 00000000..4f3977df
--- /dev/null
+++ b/content/en/cloud/identity/images/workspace-administrator-and-workspace-manager.svg
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/content/en/cloud/security/images/role-provider-admin.svg b/content/en/cloud/security/images/role-provider-admin.svg
index f964af3b..6bfea2e4 100644
--- a/content/en/cloud/security/images/role-provider-admin.svg
+++ b/content/en/cloud/security/images/role-provider-admin.svg
@@ -1,883 +1 @@
-
-
-
+
\ No newline at end of file
diff --git a/content/en/cloud/security/roles/_index.md b/content/en/cloud/security/roles/_index.md
index d19bfa6b..a7f4230d 100644
--- a/content/en/cloud/security/roles/_index.md
+++ b/content/en/cloud/security/roles/_index.md
@@ -1,17 +1,16 @@
---
title: Roles
description: >
- Roles map permissions to users. Roles contain any number of keychains, which contain any number of keys (permissions). Assign roles to users to grant permissions.
+ Roles map permissions to users. Roles contain any number of keychains, which contain any number of keys (permissions). Assign roles to users to grant permissions.
weight: 2
categories: [Security]
tags: [roles, permissions]
---
+
Roles map permissions to users. Roles contain any number of keychains, which contain any number of keys (permissions). Assign roles to users to grant permissions.
-
-
## Provider Admin Role
{{< cardpane >}}
@@ -30,7 +29,7 @@ Roles map permissions to users. Roles contain any number of keychains, which con
- Provider Admins
-**When this role first assigned?**
+**When this role is first assigned?**
- On ☁️ boot-up (using build args)
@@ -68,7 +67,7 @@ Roles map permissions to users. Roles contain any number of keychains, which con
- The Organization Owner
-**When this role first assigned?**
+**When this role is first assigned?**
- Creation of new organization or User Account creation
@@ -92,7 +91,7 @@ Roles map permissions to users. Roles contain any number of keychains, which con
- Organization Owner
-**When this role first assigned?**
+**When this role is first assigned?**
- Manually by Organization Owner
@@ -117,6 +116,72 @@ The entitlement of "organization owner" is automatically bestowed to the creator
For more information, see [Organization](/cloud/identity/organizations).
{{< /alert >}}
+## Workspace Roles
+
+{{< cardpane >}}
+{{% card %}}
+
+{{% /card %}}
+{{< /cardpane >}}
+
+{{< cardpane >}}
+{{% card header="### Workspace Administrator" %}}
+
+**What is the purpose of this role?**
+
+- Administration of a workspace along with curation of content for an organization's catalog (for each organization for which the user has this role assigned)
+
+**Who can assign this role?**
+
+- Organization Administrators or Workspace Owner
+
+**When this role is first assigned?**
+
+- Creation of new workspace
+
+**How many instances of these roles?**
+
+- Min: 1, Max: many
+- By default, the first Workspace Administrator is the owner (the creator) of the workspace.
+
+**Who can remove assignment of this role?**
+
+- Organization Administrators or Workspace Owner
+
+{{% /card %}}
+{{% card header="### Workspace Manager" %}}
+
+**What is the purpose of this role?**
+
+- Management and administration of the various workspace resources
+
+**Who can assign this role?**
+
+- Organization Administrators or Workspace Administrators
+
+**When this role is first assigned?**
+
+- Manually by Organization Administrators or Workspace Administrators
+
+**How many instances of these roles?**
+
+- Min: 0, Max: many
+
+**Who can remove assignment of this role?**
+
+- Organization Administrators or Workspace Administrators
+
+{{% /card %}}
+{{< /cardpane >}}
+
+{{< alert title="Workspace owners as entitlements" >}}
+It's essential to understand that owners are not roles, but entitlements.
+
+Workspace owners carry the organization administrator role, and may be joined in their workspace administration duties by any number of other users carrying the workspace administrator role. However, the workspace owner also has the administrative privilege to delete the workspace.
+
+The entitlement of "workspace owner" is automatically bestowed to the creator of a workspace. The individual user who created a given workspace initially is therefore granted certain administrative privileges beyond that of other workspace administrators. Specifically, workspace owners retain the sole permission to delete the workspace.
+{{< /alert >}}
+
## Team Roles
{{< cardpane >}}
@@ -135,7 +200,7 @@ For more information, see [Organization](/cloud/identity/organizations).
- Organization Administrator or Team owner
-**When this role first assigned?**
+**When is this role first assigned?**
- Creation of new team or User Account creation
- By default, the first Team Admin is owner (the team creator)
@@ -153,15 +218,15 @@ Min: 1, Max: many
- Organization Administrators or Team Owner
-**When this role first assigned?**
+**When is this role first assigned?**
- Manually by Organization Administrator or Team Owner
**How many instances of these roles?**
- Min: 0, Max: many
-{{% /card %}}
-{{< /cardpane >}}
+ {{% /card %}}
+ {{< /cardpane >}}
{{< alert title="Owners as entitlements, not roles" >}}
It's essential to understand that owners are not roles, but entitlements.
@@ -172,5 +237,3 @@ The entitlement of "team owner" is automatically bestowed to the creator of a te
For more information, see [Teams](/cloud/identity/teams).
{{< /alert >}}
-
-
diff --git a/content/en/cloud/security/roles/organization-roles.md b/content/en/cloud/security/roles/organization-roles.md
index 43de7401..bae662d8 100644
--- a/content/en/cloud/security/roles/organization-roles.md
+++ b/content/en/cloud/security/roles/organization-roles.md
@@ -6,6 +6,7 @@ weight: 2
categories: [Identity]
tags: [orgs]
---
+
{{< cardpane >}}
{{% card header="Default Organization Roles" %}}
@@ -39,7 +40,7 @@ tags: [orgs]
**What permissions does this role have?**
-- Check [Organization Permissions](cloud/identity/organizations/org-permissions/)
+- Check [Permissions Reference](/cloud/reference/default-permissions/)
{{% /card %}}
{{< /cardpane >}}
@@ -69,7 +70,7 @@ tags: [orgs]
**What permissions does this role have?**
-- Check [Organization Permissions](/cloud/identity/teams/org-permissions/)
+- Check [Permissions Reference](/cloud/reference/default-permissions/)
{{% /card %}}
-{{< /cardpane >}}
\ No newline at end of file
+{{< /cardpane >}}
diff --git a/content/en/cloud/security/roles/team-roles.md b/content/en/cloud/security/roles/team-roles.md
index 6d7cf9f9..28d5935a 100644
--- a/content/en/cloud/security/roles/team-roles.md
+++ b/content/en/cloud/security/roles/team-roles.md
@@ -39,7 +39,7 @@ tags: [teams]
**What permissions does this role have?**
-- Check [Team Permissions](/cloud/identity/teams/team-permissions/)
+- Check [Permissions Reference](/cloud/reference/default-permissions/)
{{% /card %}}
{{< /cardpane >}}
@@ -69,8 +69,7 @@ tags: [teams]
**What permissions does this role have?**
-- Check [Team Permissions](/cloud/identity/teams/team-permissions/)
+- Check [Permissions Reference](/cloud/reference/default-permissions/)
{{% /card %}}
{{< /cardpane >}}
-
diff --git a/content/en/cloud/security/roles/workspace-roles.md b/content/en/cloud/security/roles/workspace-roles.md
new file mode 100644
index 00000000..24f2ac88
--- /dev/null
+++ b/content/en/cloud/security/roles/workspace-roles.md
@@ -0,0 +1,76 @@
+---
+title: Default Workspace Roles
+description: >
+ By default, Workspaces have two roles available: Workspace Administrator and Workspace Manager.
+weight: 2
+categories: [Identity]
+tags: [workspaces]
+---
+
+{{< cardpane >}}
+{{% card %}}
+
+{{% /card %}}
+{{< /cardpane >}}
+
+{{< cardpane >}}
+
+{{% card header="## Workspace Administrator" %}}
+
+**What is the purpose of this role?**
+
+- Administration of a workspace along with curation of content for the organization's catalog (for each organization for which the user has this role assigned)
+
+**Who can assign this role?**
+
+- Organization Administrators or Workspace Owner
+
+**When this role first assigned?**
+
+- Creation of a new workspace
+
+**How many instances of these roles?**
+
+- Min: 1, Max: many
+- By default, the first Workspace Administrator is the owner (the creator) of the Workspace.
+
+**Who can remove assignment of this role?**
+
+- Organization Administrators or Workspace Owner
+
+**What permissions does this role have?**
+
+- Check [Permissions Reference](/cloud/reference/default-permissions/)
+
+{{% /card %}}
+{{< /cardpane >}}
+
+{{< cardpane >}}
+{{% card header="## Workspace Manager" %}}
+
+**What is the purpose of this role?**
+
+- Management and administration of the various workspace resources
+
+**Who can assign this role?**
+
+- Organization Administrators or Workspace Administrators
+
+**When this role first assigned?**
+
+- Manually by Organization Administrators or Workspace Administrators
+
+**How many instances of these roles?**
+
+- Min: 0, Max: many
+
+**Who can remove assignment of this role?**
+
+- Organization Administrators or Workspace Administrators
+
+**What permissions does this role have?**
+
+- Check [Permissions Reference](/cloud/reference/default-permissions/)
+
+{{% /card %}}
+{{< /cardpane >}}