From 3768ac21f8cf4a6fd50176b604ff81195504236b Mon Sep 17 00:00:00 2001 From: Matthew Helmke Date: Thu, 14 Sep 2017 10:51:32 -0500 Subject: [PATCH] Matthew Helmke edits for Red Hat writing assessment --- server_admin/topics/realms/master.adoc | 26 +++++++++++++++++--------- 1 file changed, 17 insertions(+), 9 deletions(-) diff --git a/server_admin/topics/realms/master.adoc b/server_admin/topics/realms/master.adoc index d47444f989..412f48ffec 100644 --- a/server_admin/topics/realms/master.adoc +++ b/server_admin/topics/realms/master.adoc @@ -1,15 +1,23 @@ === The Master Realm -When you boot {project_name} for the first time a pre-defined realm is created for you. This initial realm is called -the _master_ realm and is the king of all realms. Admins in this realm have permissions to view and manage any -other realm created on the server instance. When you define your initial admin account, you are creating an account in the _master_ realm. -Your initial login to the admin console will also be through the _master_ realm. +When you boot {project_name} for the first time {project_name} creates a +pre-defined realm for you. This initial realm is the _master_ realm. It is the +highest level in the hierarchy of realms. Admin accounts in this realm have +permissions to view and manage any other realm created on the server instance. +When you define your initial admin account, you create an account in the +_master_ realm. Your initial login to the admin console will also be via the +_master_ realm. -It is recommended that you do not use the _master_ realm to manage the users and applications in your organization. Keep the _master_ realm -as a place for _super_ admins to create and manage the realms in your system. This keeps things clean and organized. +Red Hat recommends that you do not use the _master_ realm to manage the users +and applications in your organization. Reserve use of the _master_ realm for +_super_ admins to create and manage the realms in your system. Following this +security model helps prevent accidental changes and follows the tradition +of permitting user accounts access to only those privileges and powers necessary +for the successful completion of their current task. -It is possible to disable the _master_ realm and define admin accounts at each individual new realm you create. Each realm has its own -dedicated Admin Console that you can log into with local accounts. This guide talks more about this in the -<<_per_realm_admin_permissions, Dedicated Realm Admin Consoles>> +It is possible to disable the _master_ realm and define admin accounts within +each individual new realm you create. Each realm has its own dedicated Admin +Console that you can log into with local accounts. This guide talks more about +this in the <<_per_realm_admin_permissions, Dedicated Realm Admin Consoles>> chapter. \ No newline at end of file