@@ -17,8 +17,8 @@ If the experimental feature `COST_METRICS` is enabled, another group should be c
If enabled, Holocron has the following access control groups and roles:
1.**Admin**: This role has all the global rights to the app with the exception of seeing and updating pay data. In order to obtain this role, user must be in the `SSO_ADMIN_GROUP` group (for more information on this group consult the **Collector Environmental Variables** section).
2.**OrgLeadership**: If the experimental feature `COST_METRICS` is enabled, this role gives the permission to view and update pay data. In order to obtain this role, user must be in the `SSO_LEADERSHIP_GROUP` group (for more information on this group consult the **Collector Environmental Variables** section).
1.**Admin**: This role has all the global rights to the app with the exception of seeing and updating pay data. In order to obtain this role, user must be in the `SSO_ADMIN_GROUP` group (for more information on this group consult the [Collector Environmental Variables](#collector-environmental-variables) section).
2.**OrgLeadership**: If the experimental feature `COST_METRICS` is enabled, this role gives the permission to view and update pay data. In order to obtain this role, user must be in the `SSO_LEADERSHIP_GROUP` group (for more information on this group consult the [Collector Environmental Variables](#collector-environmental-variables) section).
3.**OrgAdmin** (Organization Admin): This role gives the permission to view metrics of, update, and delete a specific organization. It also gives rights to create, view metrics, update, and delete teams and value streams within that same organization. This role is managed internally by the API.
4.**VSAdmin** (Value Stream Admin): This role gives the permission to view metrics of, update, and delete a specific value stream. It also gives rights to create, view metrics, update, and delete teams within that same value stream. This role is managed internally by the API.
5.**TeamAdmin** (Team Admin): This role gives the permission to view metrics of, update, and delete a team. This role is managed internally by the API.
