Access control documentation: Administrator example role

Administrators usually have access to the server where Gerrit is
running, and are therefore generally granted most if not all
permissions the server can offer.

Change-Id: Iac25a93c0bec3b3616a34b3e47a19c104fbdbcfd
Signed-off-by: Fredrik Luthander <fredrik.luthander@sonymobile.com>
diff --git a/Documentation/access-control.txt b/Documentation/access-control.txt
index 13b301b..013c3eb 100644
--- a/Documentation/access-control.txt
+++ b/Documentation/access-control.txt
@@ -932,6 +932,23 @@
 
 * <<category_owner,`Owner`>> in the gits they mostly work with.
 
+[[examples_administrator]]
+Administrator
+~~~~~~~~~~~~~
+
+The administrator role is the most powerful role known in the Gerrit universe.
+This role may grant itself (or others) any access right, and it already has
+all capabilities granted as well.  By default the
+<<administrators,`Administrators` group>> is the group that has this role.
+
+Mandatory access rights:
+
+* <<capability_administrateServer,The `Administrate Server` capability>>
+
+Suggested access rights to grant:
+
+* <<examples_project-owner,Project owner rights>>
+
 
 [[conversion_table]]
 Conversion table from 2.1.x series to 2.2.x series