anchor.diff:  
   To modify your cluster so that it does not pre-allocate UIDs, allows containers
   to run as any user, and prevents privileged containers:
  +
  +[NOTE]
  +====
  +In order to preserve customized SCCs during upgrades editing settings on the default SCCs
  +other than priority, users, and groups is not recommended.
  +====
   
   . Edit the *restricted* SCC:
   +
  
positive.code: $ oc edit scc <scc_name>
  ----
  
  == Updating the default Security Context Constraints
  
  Default SCCs will be created when the master is started if they are missing. To reset SCCs
  
negative.code: groups:
  - my-admin-group
  ----
  ====
  
  Then, run `oc create` passing the file to create it:
  