From 916292994c6253e5be673804abb2e659ff755f5d Mon Sep 17 00:00:00 2001 From: Andrew Lim Date: Wed, 10 Aug 2016 15:25:25 -0400 Subject: [PATCH] NIFI-2541 This closes #831. Update Multi-tenant authorization doc for UI change to Policy page --- nifi-docs/src/main/asciidoc/administration-guide.adoc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/nifi-docs/src/main/asciidoc/administration-guide.adoc b/nifi-docs/src/main/asciidoc/administration-guide.adoc index c15622f866..4c6dfbc887 100644 --- a/nifi-docs/src/main/asciidoc/administration-guide.adoc +++ b/nifi-docs/src/main/asciidoc/administration-guide.adoc @@ -569,6 +569,8 @@ An administrator does not need to manually create policies for every component i You can override an inherited policy (as described in the <> example below). Overriding a policy removes the inherited policy, breaking the chain of inheritance from parent to child, and creates a replacement policy to add users as desired. Inherited policies and their users can be restored by deleting the replacement policy. +NOTE: “View the policies” and “modify the policies” component-level access policies are an exception to this inherited behavior. When a user is added to either policy, they are added to the current list of administrators. They do not override higher level administrators. For this reason, only component specific administrators are displayed for the “view the policies” and “modify the policies" access policies. + [[access-policy-config-examples]] Access Policy Configuration Examples ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^