[DOC-14084][AI] Correct what the Read-Only Security Admin role can view

[TimLFletcher]

Fixes DOC-14084.

What changed

modules/learn/pages/security/roles.adoc, in Read-Only Security Admin. Two places said the role cannot see users and groups.

-The Read-Only Security Admin role lets the user view all security settings except for listing users and groups.
+The Read-Only Security Admin role lets the user view all security settings.
+As of Couchbase Server 8.0.1, this includes viewing the list of users and groups.

And the Security row of the role table:

 | View LDAP, SAML, certificates, encryption at rest, audit, and logging settings.
+View users and groups.
 | Cannot make any changes to security settings.
-Cannot view or change users or groups.
+Cannot add, remove, or change users or groups.

The ticket cites only the section text. The table said the same thing and would have been left contradicting the fix.

Sources

Claim	Source
ro_security_admin should be able to see users and groups	Ticket, from CBSE-22094, fixed by MB-70597 and MB-70594
The role holds the user and group listing permission	This page already said so. Line 110, under Read-Only Admin: "In 8.0, these permissions were split off into the ro-security-admin role", where "these permissions" is "read security information including listing users and groups"

The page contradicted itself, which is what makes this establishable without waiting on engineering.

Open question for the reviewer

Keep the "As of Couchbase Server 8.0.1" qualifier, or state it flatly?

The ticket says the server behaviour was also wrong and was fixed in 8.0.1, so on 8.0.0 the role genuinely could not view users and groups. I kept the qualifier because this branch documents all of 8.0.x and a flat statement would be wrong for 8.0.0 readers. If the convention here is to document current behaviour without per-patch qualifiers, drop the second line.

Verification

PASS[docs-server @ DOC-14084 vs baseline release/8.0]: no new build diagnostics.

The build cannot check a permissions claim. That rests on the sources above.

🤖 Generated with Claude Code