diff --git a/content/rancher/v2.x/en/tasks/clusters/adding-managing-cluster-members/_index.md b/content/rancher/v2.x/en/tasks/clusters/adding-managing-cluster-members/_index.md
index 97db45704e9..ea1f0b1a215 100644
--- a/content/rancher/v2.x/en/tasks/clusters/adding-managing-cluster-members/_index.md
+++ b/content/rancher/v2.x/en/tasks/clusters/adding-managing-cluster-members/_index.md
@@ -1,32 +1,48 @@
---
-title: Adding/Managing Cluster Members
+title: Adding Cluster Members
weight: 3525
---
-
Adding a member to a cluster
+Before a user can access a cluster and its resources, the cluster owner must explicitly assign that user a cluster _membership_, which provides the user with access and roles within the cluster.
-You can manage multiple clusters with Rancher. In that, cluster membership lets you specify which users or groups should have access to a particular cluster, and also what permissions they should have within the cluster.
-Adding a group of users as a cluster member, provides cluster access to all users within that groups. For example, if you have separate developers and QA teams, you can create separate clusters for them, and add them to those clusters respectively.
+There are two contexts where you can add cluster members:
-1. Select a cluster and go to the `Members` tab in the topmost menu bar.
-2. Click on `Add Member` in the top right corner
-3. Start typing the user/group name you want to add as a member
- 1. If local auth is turned on, you will see a list of previously added global `Users`
- 2. If some external auth provider is configured (any auth provider other than local), the configured auth provider will use your input to perform a search and return a list of users/groups that your provider has.
- 3. There is a dropdown to the right of the text box. If external auth provider is configured, this dropdown will be pre-populated with a list of groups that the current logged in user belongs to. Use the text box to search for and add any other groups.
-4. Once the user/group is selected from the text box, right below it is the `Cluster Permissions` section. Use this to assign users/groups cluster permissions as required while adding them as a member. If a group is added as a member, all users in that group will share the cluster permissions. There are three builtin options:
- 1. **Owner**
- Owner permission gives full control over the Cluster and all resources inside it.
- 2. **Member**
- Members can manage the resources inside the Cluster but not change the Cluster itself. This is the default option
- 3. **Custom**
- This option allows customization in terms of individual roles. For example, you can choose whether the member should be able to create projects or only view projects, or can manage cluster memberships
+- [Adding Members to a New Cluster]({{< baseurl >}}/rancher/v2.x/en/tasks/clusters/creating-a-cluster)
+
+ You can add members to a cluster as you create it (recommended if possible).
+
+- [Adding Members to an Existing Cluster](#adding-members-to-an-existing-cluster)
+
+ You can always add members to a cluster later. See below.
+
+### Adding Members to an Existing Cluster
+
+Following cluster creation, you can add users as cluster members so that they can access its resources.
+
+1. From the **Global** view, open the cluster that you want to add members to.
+
+2. From the main menu, select **Members**. Then click **Add Member**.
+
+3. Search for the user or group that you want to add to the project.
+
+ If external authentication is configured:
-Any **Roles** added previously also show up in the list of available `Cluster Permissions`
+ - Rancher returns users from your external authentication source as you type.
+
+ - A drop-down allows you to add groups instead of individual users. The dropdown only lists groups that you, the logged in user, are included in.
- Managing cluter members
+ >**Note:** If you are logged in as a local user, external users do not display in your search results.
-1. Select a cluster and go to the `Members` tab in the topmost menu bar. This page shows all members added so far to the cluster.
-2. If you don't want to give cluster access to some of the members, you can select and delete those members from this list.
-3. If you want to edit the permissions assigned to a member, the only way to do that right now is by deleting and adding back the member with the new desire permissions.
-4. There is an vertical ellipsis (3 dots) next to each cluster member. Clicking on it will show two options, `View in API` to see the member in API, and `Delete`, which will let you remove the member
+4. Assign the user or group **Cluster** roles.
+
+ [What are Cluster Roles?]({{< baseurl >}}/rancher/v2.x/en/concepts/global-configuration/users-permissions-roles/#cluster-roles)
+
+ >**Tip:** For Custom Roles, you can modify the list of individual roles available for assignment.
+ >
+ > - To add roles to the list, [Add a Custom Role]({{< baseurl >}}/rancher/v2.x/en/tasks/global-configuration/roles/#adding-a-custom-role).
+ > - To remove roles from the list, [Lock/Unlock Roles]({{< baseurl >}}/rancher/v2.x/en/tasks/global-configuration/roles/#locking-unlocking-roles).
+
+**Result:** The chosen users are added to the cluster.
+
+- To revoke cluster membership, select the user and click **Delete**. This action deletes membership, not the user.
+- To modify a user's roles in the cluster, delete them from the cluster, and then re-add them with modified roles.
\ No newline at end of file
diff --git a/content/rancher/v2.x/en/tasks/global-configuration/roles/_index.md b/content/rancher/v2.x/en/tasks/global-configuration/roles/_index.md
index 3766ed5d4ad..cb4a09b34cd 100644
--- a/content/rancher/v2.x/en/tasks/global-configuration/roles/_index.md
+++ b/content/rancher/v2.x/en/tasks/global-configuration/roles/_index.md
@@ -17,7 +17,7 @@ Note that _roles_ are different from _permissions_, which determine what cluster
While Rancher comes out-of-the-box with a set of default user roles, you can also create custom roles to provide users with very specific permissions within Rancher.
-1. From the **Global** view, select **Security** > **Roles** from the main menu.
+1. From the **Global** view, select **Security > Roles** from the main menu.
2. Click **Add Role**.