diff --git a/modules/manage/partials/gbac-token-claim-extraction.adoc b/modules/manage/partials/gbac-token-claim-extraction.adoc index dee3978137..b4f95f3047 100644 --- a/modules/manage/partials/gbac-token-claim-extraction.adoc +++ b/modules/manage/partials/gbac-token-claim-extraction.adoc @@ -21,6 +21,7 @@ NOTE: When `nested_group_behavior` is set to `suffix`, groups that share a leaf To update these properties, use xref:manage:cluster-maintenance/cluster-property-configuration.adoc[any configuration method] (`rpk cluster config set`, the Admin API, or Redpanda Console). Changes take effect immediately without a restart. endif::[] +ifndef::env-cloud[] === Token structure examples The following examples show how Redpanda extracts group principals from different token formats. @@ -52,8 +53,6 @@ With `nested_group_behavior: "none"` (the default), Redpanda maps the full path {"groups": ["/departments/eng/platform", "/departments/eng/infra"]} ---- -// Not supported in Cloud -ifndef::env-cloud[] ==== Path-style group names with suffix extraction When xref:reference:properties/cluster-properties.adoc#nested_group_behavior[`nested_group_behavior`] is set to `suffix`, Redpanda maps the last path segment to principals `Group:platform` and `Group:infra`. @@ -62,7 +61,6 @@ When xref:reference:properties/cluster-properties.adoc#nested_group_behavior[`ne ---- {"groups": ["/departments/eng/platform", "/departments/eng/infra"]} ---- -endif::[] ==== CSV-formatted group claim @@ -74,3 +72,4 @@ Some identity providers return group claims as a single comma-separated string i ---- Redpanda automatically splits comma-separated values and extracts principals `Group:engineering`, `Group:analytics`, and `Group:finance`. +endif::[]