Skip to content

Commit 7f439b1

Browse files
jpipkin1kimsauce
andauthored
Update docs/manage/users-roles/roles/construct-search-filter-for-role.md
Co-authored-by: Kim (Sumo Logic) <[email protected]>
1 parent 7b57cdb commit 7f439b1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/manage/users-roles/roles/construct-search-filter-for-role.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -164,7 +164,7 @@ When a user with that role filter runs a query, Sumo Logic runs it like this:
164164
```
165165

166166
:::warning
167-
Although we provide this an example to show that it's possible, we do not recommend filtering to deny access. That's because if multiple roles are applied to a user, a situation can arise where one role denies access to a certain area, but another role allows access to that same area. Therefore, if possible, always apply filtering that allows access rather than denies access. Then roles can be used in an additive way to build access for users.
167+
Although this example demonstrates that filtering to deny access is possible, we do not recommend it. If a user has multiple roles, one role may deny access to an area while another grants access, leading to conflicts. To avoid this, use filtering to allow access rather than deny it. This ensures roles work additively, making access management more predictable.
168168
:::
169169

170170
## Multiple role filters and filter precedence

0 commit comments

Comments
 (0)