[HOLD][R2] Updated content for bucket scoped tokens (cloudflare#10161)

* Updated content for bucket scoped tokens

* Corrected permission descriptions

content/r2/api/s3/tokens.md

@@ -1,22 +1,24 @@
 ---
-title: Generate an S3 auth token
+title: Authentication
 pcx_content_type: how-to
+weight: 2
 ---
 
-# Generate an S3 auth token
+# Authentication
 
-In this guide, you will learn how to generate an API token to serve as the Access Key for usage with existing S3-compatible SDKs and/or XML APIs. 
+You can generate an API token to serve as the Access Key for usage with existing S3-compatible SDKs or XML APIs. 
 
 You must purchase R2 before you can generate an API token.
 
 To create an API token: 
 
 1. In **Account Home**, select **R2**.
-2. Select **Manage R2 API Tokens** on the right side of the dashboard.
+2. Under **Account details**, select **Manage R2 API tokens**.
 3. Select **Create API token**.
-4. Select the pencil icon or **R2 Token** text to edit your API token name.
-5. Under **Permissions**, select **Read** or **Edit** for your token.
-6. Select **Create API Token**.
+4. Select the **R2 Token** text to edit your API token name.
+5. Under **Permissions**, choose a permission types for your token. Refer to [Permissions](#permissions) for information about each option.
+6. (Optional) If you select the **Object Read and Write** or **Object Read** permissions, you can scope your token to a set of buckets.
+7. Select **Create API Token**.
 
 After your token has been successfully created, review your **Secret Access Key** and **Access Key ID** values. These may often be referred to as Client Secret and Client ID, respectively.
 
@@ -29,3 +31,12 @@ You will not be able to access your **Secret Access Key** again after this step.
 The S3 endpoint is available via the `https://<ACCOUNT_ID>.r2.cloudflarestorage.com` endpoint. 
 
 Find your [account ID in the Cloudflare dashboard](/fundamentals/get-started/basic-tasks/find-account-and-zone-ids/).
+
+## Permissions
+
+| Permission | Description |
+|------------|-------------|
+| Admin Read and Write | Allows the ability to create, list and delete buckets, and edit bucket configurations in addition to list, write, and read object access. |
+| Admin Read only | Allows the ability to list buckets and view bucket configuration in addition to list and read object access. |
+| Object Read & Write | Allows the ability to read, write, and list objects in specific buckets. |
+| Object Read only | Allows the ability to read and list objects in specific buckets. |