Update authorization.md

Author: fdevans

docs/administration/security/authorization.md

@@ -231,8 +231,12 @@ actions you can restrict in the application scope:
 | "          | "             | none       | `install`                | Install plugins                                |
 | "          | "             | none       | `uninstall`              | Uninstall plugins                              |
 | "          | "             | none       | `admin`                  | Full access                                    |
-| "          | `runner`      | none       | `read`                   | Read Access to Runners                         |
-| "          | "             | none       | `admin`                  | Full access to manage Runners                  |
+| "          | `runner`      | none       | `read`                   | Read Runner setup/configuration details        |
+| "          | "             |none        | `create`                 | Create new Runner entries                      |
+| "          | "             |none        | `update`                 | Update existing Runner entries                 |
+| "          | "             |none        | `delete`                 | Delete Runner entries                          |
+|            | "             |none        | `ping`                   | Execute the ping command to check Runner status |
+| "          | "             |none        | `regenerate_credentials` | Regenerate a new credential package for a Runner|
 
 Table: Application scope generic type actions
 
@@ -257,15 +261,6 @@ Table: Application scope generic type actions
 | "             | "                  | `read`             | Read files and list directories in the storage facility |
 | "             | "                  | `delete`           | Delete files in the storage facility                    |
 | `apitoken`    | "username","roles" | `create`           | Create an API Token with specified roles or username    |
-| `runner`      | "username","roles" | `read`             | Read Runner setup/configuration details                 |
-| "             | "                  | `create`           | Create new Runner entries                               |
-| "             | "                  | `update`           | Update existing Runner entries                          |
-| "             | "                  | `delete`           | Delete Runner entries                                   |
-| "             | "                  | `ping`             | Execute the ping command to check Runner status         |
-| "             | "                  | `regenerate_credentials`| Regenerate a new credential package for a Runner   |
-
-
-
 
 ---
 
@@ -392,6 +387,12 @@ actions you can restrict in the project scope:
 | "          | "             | `update`     | Update access                                 |
 | "          | "             | `delete`     | Delete access                                 |
 | "          | "             | `post`       | Post to webhook access                        |
+| "          | `runner`      | `read`                   | Read Runner setup/configuration details        |
+| "          | "             | `create`                 | Create new Runner entries                      |
+| "          | "             | `update`                 | Update existing Runner entries                 |
+| "          | "             | `delete`                 | Delete Runner entries                          |
+|            | "             | `ping`                   | Execute the ping command to check Runner status |
+| "          | "             | `regenerate_credentials` | Regenerate a new credential package for a Runner|
 
 Type Properties Actions Description
 
@@ -419,6 +420,7 @@ Type Properties Actions Description
 | "       |                                   | `view_history`     | View job executions history                                                         |
 | `node`  | "rundeck_server", "nodename", ... | `read`             | View the node in the UI (see [Node resource properties](#node-resource-properties)) |
 | "       |                                   | `run`              | Run jobs/adhoc on the node                                                          |
+| `runner` |  "project", "id"                 | `read`             | Read Runner Listing                                                                 |
 
 
 _Note_: see [Node resource properties](#node-resource-properties) for more node resource properties for authorization.
@@ -430,6 +432,9 @@ _Note_: `runAs` and `killAs` actions only apply to certain API endpoints, and al
 _Note_:
 Job deletion requires allowing the 'delete' action both at the generic type and specific resource levels.
 
+_Note_:
+`runner` properties "project" is looking for a project name, and "id" is for the Runner's ID.
+
 Recall that defining rules for a generic resource type is done in this way:
 
 ```yaml