clarify that privileges are always part of roles

diff --git a/pveum.adoc b/pveum.adoc
index f1abd942dfdbe669e77dbe51a4686f4805abdca3..36426cf8fdc3acbde4cee50107b67e3877d730e2 100644 (file)
--- a/pveum.adoc
+++ b/pveum.adoc
@@ -244,7 +244,8 @@ Privileges
 
 A privilege is the right to perform a specific action. To simplify
 management, lists of privileges are grouped into roles, which can then
-be uses to set permissions.
+be used in the permission table. Note that privileges cannot directly be
+assigned to users and paths without being part of a role.
 
 We currently use the following privileges: