anchor.diff:  Some Cloud Foundry components, like Cloud Controller, only use GUIDs for user
   identification.
   You can use the UAA to retrieve the emails of your Cloud Foundry instance users
  -either as a list or for a specific user with that user's GUID.
  -
  -To retrieve user email addresses:
  -
  -1. Use `uaac target uaa.YOUR-DOMAIN` to target your UAA server.
  +either as a list or, for a specific user, with that user's GUID.
  +
  +Follow the steps below to retrieve user email addresses:
  +
  +1. Run `uaac target uaa.YOUR-DOMAIN` to target your UAA server.
       <pre class="terminal">
       $ uaac target uaa.example.com
       </pre>
   
   1. Record the **uaa:admin:client_secret** from your deployment manifest.
   
  -1. Use `uaac token client get admin -s ADMIN-CLIENT-SECRET` to authenticate and
  -obtain an access token for the admin client from the UAA server.
  -UAAC stores the token in `~/.uaac.yml`.
  +1. Run `uaac token client get admin -s ADMIN-CLIENT-PASSWORD` to authenticate and obtain an access token for the admin client from the UAA server. Replace 
  +`ADMIN-CLIENT-PASSWORD` with your admin password. UAAC stores the token in `~/.uaac.yml`.
       <pre class="terminal">
       $ uaac token client get admin -s MyAdminPassword
       </pre>
   
  -1. Use `uaac contexts` to display the users and applications authorized by the
  +1. Run `uaac contexts` to display the users and applications authorized by the
   UAA server, and the permissions granted to each user and application.
   
       <pre class="terminal">
  
positive.code: `client_id: admin` user for **scim.write**.
  The value **scim.write** represents sufficient permissions to create accounts.
  
  1. If the admin user lacks permissions to create accounts:
      * Use `uaac client update admin --authorities "EXISTING-PERMISSIONS
      scim.write"` to add the necessary permissions to the admin user account on
      the UAA server. Replace EXISTING-PERMISSIONS with the current contents of
      the `scope` section from `uaac contexts`.
      * Use `uaac token delete` to delete the local token.
      * Use `uaac token client get admin` to obtain an updated access token from
      the UAA server.
  
      <pre class="terminal">
  
negative.code:     value: user3@example.com
      </pre>
  
  1. Run `uaac users "id eq GUID" --attributes emails` with the GUID of a specific
  user to retrieve that user's email address.
  
      <pre class="terminal">
  