diff --git a/docs/platform/concepts/permissions.md b/docs/platform/concepts/permissions.md index 5d08251b..c3c7179a 100644 --- a/docs/platform/concepts/permissions.md +++ b/docs/platform/concepts/permissions.md @@ -26,10 +26,10 @@ and services within it. ### Organization roles -| Console name | API name | Allowed actions | -| ------------------------------- | -------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Organization member | None | This is the default role for all organization users. **You cannot grant this role to users.**

All non-managed organization users can:
[Managed users](/docs/platform/concepts/managed-users) have more restrictions. | -| Admin | `role:organization:admin` | | +| Console name | API name | Allowed actions | +| ------------------- | ------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Organization member | None | This is the default role for all organization users. **You cannot grant this role to users.**

All non-managed organization users can:
[Managed users](/docs/platform/concepts/managed-users) have more restrictions. | +| Admin | `role:organization:admin` | Cannot delete an organization or manage its super admin. | ### Organization permissions diff --git a/docs/platform/howto/make-super-admin.md b/docs/platform/howto/make-super-admin.md index 9431f4e1..5bf36c8b 100644 --- a/docs/platform/howto/make-super-admin.md +++ b/docs/platform/howto/make-super-admin.md @@ -10,6 +10,9 @@ The super admin role is a special role that has unrestricted access to an organi This role should be limited to as few users as possible for organization setup and emergency use. For daily administrative tasks, assign users the [organization admin role](/docs/platform/concepts/permissions) instead. Aiven also highly recommends enabling [two-factor authentication](/docs/platform/howto/user-2fa) for super admin. ::: +Only super admin can grant or revoke super admin privileges for other users. Super admin +are also the only users that can delete an organization. + To make a user a super admin: 1. In the organization, click **Admin**.