From f443c4cfc6bab3e0aafbf4aca60ea155f80d1f4f Mon Sep 17 00:00:00 2001 From: Vivek Saraswat Date: Wed, 18 Jan 2017 09:41:22 -0800 Subject: [PATCH] Permission Levels Full Control Warning (UCP 2.0) --- .../ucp/2.0/guides/user-management/permission-levels.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/datacenter/ucp/2.0/guides/user-management/permission-levels.md b/datacenter/ucp/2.0/guides/user-management/permission-levels.md index 6a86b5d6a4..2016059d33 100644 --- a/datacenter/ucp/2.0/guides/user-management/permission-levels.md +++ b/datacenter/ucp/2.0/guides/user-management/permission-levels.md @@ -37,6 +37,10 @@ access to full control over the resources. When a user only has a default permission assigned, only them and admin users can see the containers they deploy in the cluster. +**NOTE**: Full-control users can utilize host-mounted volumes, which can potentially gain + access to sensitive material on the cluster. We recommend giving full-control permissions + to users you would trust with admin-level access. + ## Team permission levels Teams allow you to define fine-grain permissions to services, containers, and