variable api note and rbac page update

Author: ShashiSubramanya

modules/ROOT/pages/roles.adoc

@@ -170,7 +170,7 @@ UI: *Can create/edit Connections*| Allows creating, editing, and managing link:h
 |Data objects|API: `CAN_MANAGE_WORKSHEET_VIEWS_TABLES` +
 UI: *Can manage data models* |Allows users to create, edit, delete, and manage Models, Tables, and Views.
 |Custom variables| API: `CAN_MANAGE_VARIABLES` +
-UI: *Can manage variables* | Allows users to xref:variables.adoc[create and manage custom variables].
+UI: *Can manage variables* | Allows users to manage formula Variables in the current Org scope.
 |===
 
 

modules/ROOT/pages/variables.adoc

@@ -50,6 +50,11 @@ xref:variables.adoc#_get_details_of_variables[Retrieves the variables available
 xref:variables.adoc#_delete_a_variable[Deletes the variable] specified in the API request.
 
 
+[NOTE]
+====
+* Variable APIs for creating, deleting, searching, and assigning values can only be used by the ThoughtSpot instance administrator.
+* These APIs can only be used from the primary Org.
+====
 ////
 [NOTE]
 ====
@@ -588,4 +593,3 @@ If the API request is successful, ThoughtSpot returns a 204 response code.
 * For more information about using formula variables in RLS rules, see link:https://docs.thoughtspot.com/cloud/latest/rls-variables-reference[Formula variables, window=_blank].
 * For information about assigning security entitlements via ABAC tokens, see xref:abac_rls-variables.adoc[ABAC via RLS with formula variables].
 * For information about RLS rules, see link:https://docs.thoughtspot.com/cloud/latest/security-rls[RLS rules documentation, window=_blank].
-