(DOCSP-11888) Explain link between Atlas roles and Charts permissions (#406)

(DOCSP-11888) Explain link between Atlas roles and Charts permissions

Author: zach-carr

source/data-source-permissions.txt

@@ -16,12 +16,6 @@ Data source permissions dictate which actions users in your |service|
 project can perform on the data source. You can also set data source
 permissions to make a data source only visible to a subset of users.
 
-|service| automatically grants data source permissions based on a
-user's :atlas:`Atlas role </reference/user-roles/>`. You must
-manually :ref:`grant permissions <data-source-set-permissions>`
-to users with the ``Project Read Only`` |service| role to allow
-those users to view charts which use a particular data source.
-
 The following table describes the data source permission levels:
 
 .. _data-source-roles:
@@ -30,8 +24,9 @@ The following table describes the data source permission levels:
    :header-rows: 1
    :widths: 20 80
 
-   * - Permission
+   * - Data Source Permission
      - Description
+
    * - .. data:: Viewer
      - Can view any chart on a dashboard that uses the data source.
        You can grant this permission to
@@ -48,37 +43,57 @@ The following table describes the data source permission levels:
      - Inherits all actions from ``Viewer`` and can also
        create and edit charts using the data source.
 
-       Users who have one of the following
-       :atlas:`Atlas roles </reference/user-roles/>` automatically have
-       the ``Author`` permission on all data sources:
-
-       - ``Project Data Access Read Only``
-       - ``Project Data Access Read / Write``
-       - ``Project Data Access Admin``
-
        .. note::
 
           If you create a data source and do not have the
           ``Project Owner``
-          :atlas:`Atlas role </reference/user-roles/>`, you will
+          :atlas:`project role </reference/user-roles/#project-roles>`, 
+          you will
           not be an ``Owner`` of that data source. The ``Owner``
           data source permission is reserved for users with the
-          ``Project Owner`` |service| role.
+          ``Project Owner`` role.
 
    * - .. data:: Owner
      - Inherits all permissions from ``Author`` and can also
        :ref:`manage all aspects of the data source
        <manage-existing-data-sources>`.
-       
-       Users with the ``Project Owner``
-       :atlas:`Atlas role </reference/user-roles/>` automatically
-       have the ``Owner`` permission on all data sources.
+
+Permissions Granted by Project Roles
+------------------------------------
+
+|charts-short| automatically grants data source permissions for 
+certain :atlas:`project roles </reference/user-roles/#project-roles>`. 
+The following table lists project roles and the data source 
+permission they grant:
+
+.. list-table::
+   :header-rows: 1
+   :widths: 70 30
+
+   * - Project Roles
+     - Data Source Permission
+
+   * - - :authrole:`Project Read Only`
+       - :authrole:`Project Cluster Manager`
+     - None. A data source ``Owner`` may 
+       :ref:`grant Viewer permissions <data-source-set-permissions>` 
+       to these roles.
+
+   * - - :authrole:`Project Data Access Admin`
+       - :authrole:`Project Data Access Read/Write`
+       - :authrole:`Project Data Access Read Only`
+     - ``Author``
+
+   * - - :authrole:`Project Owner`
+     - ``Owner``
+      
 
 Modify Data Source Authors and Owners
 -------------------------------------
 
 |service| automatically assigns data source permissions to users based
-on their :atlas:`Atlas roles </reference/user-roles/>`. As such, to
+on their :atlas:`project roles </reference/user-roles/#project-roles>`. 
+As such, to
 modify data source :data:`Authors <Author>` and :data:`Owners <Owner>`,
 you must do so through the |service| :guilabel:`Access Management` page.
 
@@ -157,8 +172,8 @@ Specific User Access
    instance.
 
 To grant specific users with the ``Project Read Only``
-:atlas:`Atlas role </reference/user-roles/>` permission to view
-charts which use your data source:
+:atlas:`project role </reference/user-roles/#project-roles>` permission 
+to view charts which use your data source:
 
 1. For the data source to which you want to manage access, click the 
    :guilabel:`Access` button.
@@ -179,7 +194,8 @@ Access for All Users
 ~~~~~~~~~~~~~~~~~~~~
 
 You can the grant the :data:`Viewer` permission to all users with the
-``Project Read Only`` :atlas:`Atlas role </reference/user-roles/>`.
+``Project Read Only`` 
+:atlas:`project role </reference/user-roles/#project-roles>`.
 This allows all users to view any chart on a dashboard that uses that
 data source.