diff --git a/docs/versioned_docs/version-v1.4/oauth2.md b/docs/versioned_docs/version-v1.4/oauth2.md index b9112bf17a9..588d3db9dcb 100644 --- a/docs/versioned_docs/version-v1.4/oauth2.md +++ b/docs/versioned_docs/version-v1.4/oauth2.md @@ -79,7 +79,9 @@ More details about the various OAuth2 flows can be found in these articles: :::info The OAuth2 Scope reflects a permission the user gave to the OAuth2 Application, not a permission the system (e.g. API) gave to that OAuth2 application. Also, the OAuth2 Scope can not be changed without revoking the -token. ::: +token. + +::: A second important concept is the OAuth 2.0 Scope. Many people confuse OAuth 2.0 Scope with internal Access Control like for example Role Based Access Control