From 8ebe5042e60651485c6ddef1d3910bda62e3842c Mon Sep 17 00:00:00 2001
From: Stacey Salamon <stacey.salamon@aiven.io>
Date: Mon, 9 Dec 2024 13:09:16 +0100
Subject: [PATCH] add organization:users:write permission

---
 docs/platform/concepts/permissions.md | 29 ++++++++++++++-------------
 1 file changed, 15 insertions(+), 14 deletions(-)

diff --git a/docs/platform/concepts/permissions.md b/docs/platform/concepts/permissions.md
index 8d2bb039..be9b335e 100644
--- a/docs/platform/concepts/permissions.md
+++ b/docs/platform/concepts/permissions.md
@@ -37,21 +37,22 @@ and services within it.
 
 ### Organization permissions
 
-|          Console name           |             API name             |                                                                                                                                 Allowed actions                                                                                                                                 |
-| ------------------------------- | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Manage application users        | `organization:app_users:write`   | <ul> <li> Create, edit, and delete application users. </li> <li> Generate and revoke application tokens. </li> </ul>                                                                                                                                                            |
-| View organization audit log     | `organization:audit_log:read`    | <ul> <li> View the audit log. </li> </ul>                                                                                                                                                                                                                                       |
-| View billing                    | `organization:billing:read`      | <ul> <li> View all billing groups, billing addresses, and payment methods. </li> </ul>                                                                                                                                                                                          |
-| Manage billing                  | `organization:billing:write`     | <ul> <li> Create, edit, and delete billing groups, billing addresses, and payment methods. </li> </ul>                                                                                                                                                                          |
-| Manage domains                  | `organization:domains:write`     | <ul> <li> Add and remove domains. </li> </ul>                                                                                                                                                                                                                                   |
-| Manage groups                   | `organization:groups:write`      | <ul> <li> Add and remove organization and application users to/from groups. </li> </ul>                                                                                                                                                                                         |
-| Manage IdPs                     | `organization:idps:write`        | <ul> <li> Add edit, enable, disable, and remove identity providers. </li> </ul>                                                                                                                                                                                                 |
-| View organization networking    | `organization:networking:read`   | <ul> <li> View all organization virtual private clouds (VPCs). </li> </ul>                                                                                                                                                                                                      |
-| Manage organization networking  | `organization:networking:write`  | <ul> <li> Add, edit, and remove organization VPCs. </li> <li> Create and change VPC peering connections. </li> </ul>                                                                                                                                                            |
-| View organization permissions   | `organization:permissions:read`  | <ul> <li> View all permissions. </li> </ul>                                                                                                                                                                                                                                     |
-| Manage organization permissions | `organization:permissions:write` | <ul> <li> Grant, edit, and remove organization permissions to/from groups and users. </li> </ul>                                                                                                                                                                                |
-| View projects                   | `organization:projects:read`     | <ul> <li> List all projects. </li> <li> View all project tags. </li> </ul> No project or service access.                                                                                                                                                                        |
+|          Console name           |             API name             |                                                                                                                            Allowed actions                                                                                                                            |
+| ------------------------------- | -------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Manage application users        | `organization:app_users:write`   | <ul> <li> Create, edit, and delete application users. </li> <li> Generate and revoke application tokens. </li> </ul>                                                                                                                                                  |
+| View organization audit log     | `organization:audit_logs:read`   | <ul> <li> View the audit log. </li> </ul>                                                                                                                                                                                                                             |
+| View billing                    | `organization:billing:read`      | <ul> <li> View all billing groups, billing addresses, and payment methods. </li> </ul>                                                                                                                                                                                |
+| Manage billing                  | `organization:billing:write`     | <ul> <li> Create, edit, and delete billing groups, billing addresses, and payment methods. </li> </ul>                                                                                                                                                                |
+| Manage domains                  | `organization:domains:write`     | <ul> <li> Add, edit, and remove domains. </li> <li> View all organization domains. </li> </ul>                                                                                                                                                                        |
+| Manage groups                   | `organization:groups:write`      | <ul> <li> Add and remove organization and application users to/from groups. </li> </ul>                                                                                                                                                                               |
+| Manage IdPs                     | `organization:idps:write`        | <ul> <li> Add edit, enable, disable, and remove identity providers. </li> </ul>                                                                                                                                                                                       |
+| View organization networking    | `organization:networking:read`   | <ul> <li> View all organization virtual private clouds (VPCs). </li> </ul>                                                                                                                                                                                            |
+| Manage organization networking  | `organization:networking:write`  | <ul> <li> Add, edit, and remove organization VPCs. </li> <li> Create and change VPC peering connections. </li> </ul>                                                                                                                                                  |
+| View organization permissions   | `organization:permissions:read`  | <ul> <li> View all permissions. </li> </ul>                                                                                                                                                                                                                           |
+| Manage organization permissions | `organization:permissions:write` | <ul> <li> Grant, edit, and remove organization permissions to/from groups and users. </li> </ul>                                                                                                                                                                      |
+| View projects                   | `organization:projects:read`     | <ul> <li> List all projects. </li> <li> View all project tags. </li> </ul> No project or service access.                                                                                                                                                              |
 | Manage projects                 | `organization:projects:write`    | <ul> <li> Create and delete projects. </li> <li> Change the billing group the project is assigned to. </li> <li> Move a project to another organization or unit. </li> <li> Add and remove project tags. </li> </ul> No access to other project settings or services. |
+| Manage organization users       | `organization:users:write`       | <ul> <li> Invite new users to the organization. </li> <li> Deactivate, edit and delete managed users. </li> <li> Remove non-managed users from the organization. </li> </ul>                                                                                          |
 
 
 ## Project roles and permissions