anchor.diff:  
   For details on what activities are allowed for suspended orgs, see [Roles and Permissions for Suspended Orgs](#suspendedroles). 
   
  -## <a id='spaces'></a>Spaces ##
   
  -A space provides users with access to a shared location for app
  -development, deployment, and maintenance. An org can contain multiple spaces.
  -Every app, service, and route is scoped to a space.
  -Roles provide access control for these resources and each space role applies only to a particular space.
  +## <a id='spaces'></a> Spaces
  +
  +A space provides users with access to a shared location for app development, deployment, and maintenance. An org can contain multiple spaces. Every app, service, and route is scoped to a space. Roles provide access control for these resources and each space role applies only to a particular space.
   
   Org managers can set quotas on the following for a space:
  -    * usage of paid services
  -    * number of app instances
  -    * number of service keys
  -    * number of routes
  -    * number of reserved route ports
  -    * memory used across the space
  -    * memory used by a single app instances
  +
  +* Usage of paid services
  +* Number of app instances
  +* Number of service keys
  +* Number of routes
  +* Number of reserved route ports
  +* Memory used across the space
  +* Memory used by a single app instances
  +
   
   ## <a id='roles'></a> User Roles
   
  -A user account represents an individual person within the context of a <%= vars.product_name %> foundation.
  -A user can have one or more roles. These roles define the user’s permissions in
  -orgs and spaces.
  +A user account represents an individual person within the context of a <%= vars.product_name %> foundation. A user can have one or more roles. These roles define the user’s permissions in orgs and spaces.
   
   Roles can be assigned different scopes of User Account and Authentication (UAA) privileges. For more information about UAA scopes, see [Scopes](https://docs.cloudfoundry.org/concepts/architecture/uaa.html#scopes) in _Component: User Account and Authentication (UAA) Server_.
   
  
positive.code: ---
  
  This topic describes orgs and spaces in <%= vars.product_name %> foundations. It also describes the default permissions for user roles in <%= vars.product_name %>.
  
  ## <a id="overview"></a> Overview
  
  
negative.code: 
  <%= partial vars.roles_table %>
  
  ### <a id='suspendedroles'></a> Roles and Permissions for Suspended Orgs
  
  The following table describes roles and permissions applied after an operator sets the status of an org to _suspended_.
  
  