act on review point

Author: paulohtb6

modules/terms/partials/gbac.adoc

@@ -1,8 +1,8 @@
 === GBAC
 :term-name: GBAC
-:hover-text: Group-based access control extends RBAC by letting you assign permissions to OIDC groups so that users inherit access based on their identity provider group membership.
+:hover-text: Group-based access control lets you assign permissions to OIDC groups so that users inherit access based on their identity provider group membership.
 :category: Redpanda security
 
-GBAC builds on xref:ROOT:manage:security/authorization/rbac.adoc[role-based access control (RBAC)] to simplify permission management at scale. Instead of assigning roles or ACLs to individual users, you assign them to OIDC groups managed by your identity provider. Users inherit permissions from all groups reported in their OIDC token claims.
+GBAC allows you to manage permissions at the group level instead of per user. You can grant permissions to groups in two ways: create xref:ROOT:manage:security/authorization/acl.adoc[ACLs] with `Group:<name>` principals, or assign groups as members of xref:ROOT:manage:security/authorization/rbac.adoc[RBAC] roles. Both approaches can be used independently.
 
 For more information, see xref:ROOT:manage:security/authorization/gbac.adoc[].