diff --git a/modules/ROOT/pages/_partials/sync-api/sync-function-api-access.adoc b/modules/ROOT/pages/_partials/sync-api/sync-function-api-access.adoc index d444bfb3f..14001c9cb 100644 --- a/modules/ROOT/pages/_partials/sync-api/sync-function-api-access.adoc +++ b/modules/ROOT/pages/_partials/sync-api/sync-function-api-access.adoc @@ -30,7 +30,10 @@ You can invoke this function multiple times from within your Sync Function. TIP: Prefix the `username` argument value with `role:` to apply this function to a role rather than a user. This grants access to the specified channel(s) for all users assigned that role. -The effects of all access calls by all active documents are effectively combined in a union, so if _any_ document grants a user access to a channel, that user has access to the channel. +The effects of all access calls by all active documents are effectively combined in a union, so if any document grants a user access to a channel, that user has access to the channel. + +The `access()` function grants access to users or roles that do not yet exist. +When you create new users or define roles later, the previous granted access permissions apply to them. NOTE: The sync function `access()` call does not support the wildcard ('***') for granting access to all channels. To grant a user access to all channels, use the REST API channel grant endpoint.