[req-changes] Updated docs

Author: pandafy

docs/user/basic-concepts.rst

@@ -245,10 +245,15 @@ all organizations.
 
 Shared objects can only be created by superusers. Non-superusers (e.g.
 :ref:`users_organization_manager`) have view-only access to shared
-objects. However, they can use these shared objects when creating related
-organization-specific resources. E.g., an organization manager can use a
-shared VPN server to create a configuration template for their
-organization.
+objects, both through the admin interface and the REST API. However, they
+can use these shared objects when creating related organization-specific
+resources. For example, an organization manager can use a shared VPN
+server to create a configuration template for their organization.
+
+In some cases, non-superusers may be restricted from viewing sensitive
+details of shared objects—particularly if such information could allow
+them to gain unauthorized access to infrastructure or data used by other
+organizations.
 
 By sharing common resources, global uniformity and consistency can be
 enforced across the entire system.