Describe how admins can control what service users can do Change-Id: I156f2c7d6f4b8928d7e510d65d61c5d35631d1c0 Signed-off-by: Edwin Kempin <edwin.kempin@sap.com>