diff --git a/docs/admin/users/groups-roles.md b/docs/admin/users/groups-roles.md
index 17c0fc8b5b8b9..e40efb0bd5a10 100644
--- a/docs/admin/users/groups-roles.md
+++ b/docs/admin/users/groups-roles.md
@@ -42,6 +42,25 @@ in the dashboard under **Organizations** -> **My Organization** -> **Roles**.
+### Example roles
+
+- The `Banking Compliance Auditor` custom role cannot create workspaces, but can
+ read template source code and view audit logs
+- The `Organization Lead` role can access user workspaces for troubleshooting
+ purposes, but cannot edit templates
+- The `Platform Member` role cannot edit or create workspaces as they are
+ created via a third-party system
+
+Custom roles can also be applied to
+[headless user accounts](./headless-auth.md):
+
+- A `Health Check` role can view deployment status but cannot create workspaces,
+ manage templates, or view users
+- A `CI` role can update manage templates but cannot create workspaces or view
+ users
+
+### Creating custom roles
+
Clicking "Create custom role" opens a UI to select the desired permissions for a
given persona.
diff --git a/docs/admin/users/index.md b/docs/admin/users/index.md
index 6b500ea68ac66..a00030a514f05 100644
--- a/docs/admin/users/index.md
+++ b/docs/admin/users/index.md
@@ -143,7 +143,12 @@ Confirm the user activation by typing **yes** and pressing **enter**.
## Reset a password
-To reset a user's via the web UI:
+As of 2.17.0, users can reset their password independently on the login screen
+by clicking "Forgot Password." This feature requires
+[email notifications](../monitoring/notifications/index.md#smtp-email) to be
+configured on the deployment.
+
+To reset a user's password as an administrator via the web UI:
1. Go to **Users**.
2. Find the user whose password you want to reset, click the vertical ellipsis
pFad - Phonifier reborn
Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.
Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.
Alternative Proxies:
Alternative Proxy
pFad Proxy
pFad v3 Proxy
pFad v4 Proxy