anchor.diff:  
   |===
   
  -
  -
  -== Disabling a build strategy globally
  -To prevent access to a particular build strategy globally, login as cluster administrator and edit
  -each of the default roles:
  +== Disabling a Build Strategy Globally
  +To prevent access to a particular build strategy globally, log in as a user with
  +link:../architecture/additional_concepts/authorization.html#roles[*cluster-admin*]
  +privileges and edit each of the default roles:
   
   ----
   $ oc edit clusterrole admin
  
positive.code:   verbs:
    - create
  ----
  
  
  As cluster administrator, create the cluster role:
  
  ----
  $ oc create -f  dockerstrategy.yaml
  ----
  
  ====
  
  1. Assign the cluster role to an individual user
  +
  .Assign role dockerbuilder to devuser
  ====
  
  ----
  $ oadm policy add-cluster-role-to-user dockerbuilder devuser
  ----
  
  ====
  
  
  [WARNING]
  ====
  Granting access to a user a cluster level to the builds/docker subresource means that the user
  will be able to create builds with the Docker strategy in any project in which they can create builds.
  
  ====
  
  
  == Allowing only certain users in a specific project to create builds with a particular strategy
  
  Similar to granting the build strategy role to a user globally:
  
  1. link:#disabling-a-build-strategy-globally[Remove the build strategy resource from the default admin and edit roles].
  1. link:#create-separate-role[Create a separate role for that build strategy]
  1. Assign the role to an individual user in a project
  +
  .Assign role dockerbuilder to devuser in project devproject
  ====
  
  ----
  $ oadm policy add-role-to-user dockerbuilder devuser -n devproject
  ----
  
  ====
  
negative.code:   - pods/portforward
  
  ...
  ----
  <1> Delete this line to disable Docker builds globally for users with the
  *admin* role.
  =====
  
  [[restricting-build-strategies-to-a-user-globally]]
  
  == Restricting Build Strategies to a User Globally
  
  To allow only a set of specific users to create builds with a particular
  strategy:
  
  . link:#disabling-a-build-strategy-globally[Remove the build strategy
  subresource from the default *admin* and *edit* roles].
  
  . [[create-separate-role]]Create a separate role for the build strategy. For
  example, create a *_dockerstrategy.yaml_* file that defines a separate role for
  the Docker build strategy:
  +
  ====
  
  [source,yaml]
  ----
  kind: ClusterRole
  apiVersion: v1
  