From 58c6517cd042f1d942bdc14c3dfacd6f3d9c4975 Mon Sep 17 00:00:00 2001 From: Vivek Saraswat Date: Wed, 18 Jan 2017 09:42:34 -0800 Subject: [PATCH] Full Control Users Warning (UCP 1.1) --- datacenter/ucp/1.1/user-management/permission-levels.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/datacenter/ucp/1.1/user-management/permission-levels.md b/datacenter/ucp/1.1/user-management/permission-levels.md index 71df6137f2..09a067298b 100644 --- a/datacenter/ucp/1.1/user-management/permission-levels.md +++ b/datacenter/ucp/1.1/user-management/permission-levels.md @@ -39,6 +39,10 @@ access to full control over the resources. When a user only has a default permission assigned, only them and admin users can see the containers they deploy in the cluster. +**NOTE**: Full-control users can utilize host-mounted volumes, which can potentially gain + access to sensitive material on the cluster. We recommend giving full-control permissions + to users you would trust with admin-level access. + ## Team permission levels Teams allow you to define fine-grain permissions to containers that have the @@ -56,4 +60,4 @@ There are four permission levels: ## Where to go next * [Create and manage users](create-and-manage-users.md) -* [Create and manage teams](create-and-manage-teams.md) \ No newline at end of file +* [Create and manage teams](create-and-manage-teams.md)