minor edits

Author: micheleRP

modules/manage/pages/security/authorization/acl.adoc

@@ -29,11 +29,11 @@ ACLs control access by defining:
 
 ACLs work with SASL/SCRAM and mTLS authentication methods to provide comprehensive security.
 
-== Create ACLs
+== Manage ACLs
 
 You can create and manage ACLs in the following ways:
 
-* *{ui}*: Select *Security* from the left navigation menu, and then select either the *ACLs* tab (for user principals) or the *Roles* tab (for role principals).
+* *{ui}*: Select *Security* from the left navigation menu, select the *ACLs* tab. After the ACL is created, you can add users or roles to it. 
 * *Command Line*: Use the `rpk` command-line tool for programmatic management.
 +
 For example, suppose you want to create a user named `analytics-user` who can read from topics starting with `logs-` and write to a topic called `processed-data`:

modules/manage/partials/rbac-dp.adoc

@@ -12,10 +12,10 @@ Benefits of RBAC:
 * Better compliance: Roles align with organizational structure and job duties
 * Reduced errors: Fewer individual ACL assignments mean fewer mistakes
 
-== Create roles
+== Manage roles
 
 ifndef::env-cloud[]
-Administrators can manage RBAC configurations with `rpk`, the Redpanda Admin API, or {ui}. 
+Administrators can create and manage RBAC configurations with `rpk`, the Redpanda Admin API, or {ui}. 
 
 endif::[]
 
@@ -24,7 +24,7 @@ Administrators can manage RBAC configurations with `rpk` or {ui}.
 
 endif::[]
 
-In {ui}, select *Security* from the left navigation menu, and then select either the *Roles* tab (for role principals) or the *ACLs* tab (for user principals).
+In {ui}, select *Security* from the left navigation menu, and then select the *Roles* tab. After the role is created, you can add users/principals to it. 
 
 For `rpk`, use xref:reference:rpk/rpk-security/rpk-security.adoc[`rpk security`]. For example, suppose you want to create a `DataAnalysts` role for users who need to read from analytics topics and write to reporting topics:
 
@@ -116,8 +116,8 @@ Permission resolution rules:
 
 A user is permitted to perform an operation if and only if:
 
-. *No DENY permission exists* matching the operation
-. *An ALLOW permission exists* matching the operation
+. No DENY permission exists matching the operation
+. An ALLOW permission exists matching the operation
 
 Examples: