anchor.diff:  An example of how to use [UAA CLI](https://rubygems.org/gems/cf-uaac) to add a new user that has readonly access on any Director. Enter the client secret provided for the UAA admin client in the manifest at `uaa.admin.client_secret`.
   
   <pre class="terminal">
  -$ uaac target https://54.236.100.56:8443 --skip-ssl-validation
  +$ uaac target https://54.236.100.56:8443 --ca-cert certs/rootCA.pem
   $ uaac token client get admin
   Client secret:  **************
   $ uaac user add some-new-user --emails new.user@example.com
   </pre>
  +
  +<p class="note">Note: Use UAA CLI v3.1.4+ to specify custom CA certificate.</p>
   
   You can add permissions to users by defining a group and adding users to that group:
   
  
positive.code:         user: postgres
          password: postgres-password
          database: bosh
          additional_databases: [uaa] # <+++
          adapter: postgres
      ```
  
  
negative.code:       url: https://bosh.io/d/github.com/cloudfoundry/bosh?v=209
        sha1: a96833b6c68abda5aaa5d05ebdd0a5d394e6c15f
      # ...
      - name: uaa # <---
        url: https://bosh.io/d/github.com/cloudfoundry/uaa-release?v=1
        sha1: 477289da17ffe105d0b6bde1bc10f61b1cb50fb4
      ```
  