Added csm auth docs for Preapproved guid feature

content/docs/authorization/cli.md

@@ -38,6 +38,7 @@ If you feel that something is unclear or missing in this document, please open u
 | [karavictl tenant list](#karavictl-tenant-list) | Lists tenant resources within CSM |
 | [karavictl tenant revoke](#karavictl-tenant-revoke) | Get a tenant resource within CSM |
 | [karavictl tenant delete](#karavictl-tenant-delete) | Deletes a tenant resource within CSM |
+| [karavictl tenant update](#karavictl-tenant-update) | Updates a tenant resource within CSM |
 
 
 ## General Commands
@@ -1095,3 +1096,42 @@ karavictl tenant delete [flags]
 $ karavictl tenant delete --name Alice
 ```
 On success, there will be no output. You may run `karavictl tenant get --name <tenant-name>` to confirm the deletion occurred.
+
+
+
+---
+
+
+
+### karavictl tenant update
+
+Updates a tenant's resource within CSM
+
+##### Synopsis
+
+Updates a tenant resource within CSM
+
+```
+karavictl tenant update [flags]
+```
+
+#### Options
+
+```
+  -h, --help   help for create
+  -n, --name string   Tenant name
+      --approvesdc boolean (Usage: --approvesdc=true/false | This flag is only applicable to PowerFlex. This flag will Approve/Deny a tenant's SDC request )
+```
+
+##### Options inherited from parent commands
+
+```
+      --addr string     Address of the server (default "localhost:443")
+      --config string   config file (default is $HOME/.karavictl.yaml)
+```
+
+##### Output
+```
+$ karavictl tenant update --name Alice --approvesdc=false
+```
+On success, there will be no output. You may run `karavictl tenant get --name <tenant-name>` to confirm the update was persisted.

content/docs/authorization/configuration/proxy-server/_index.md

@@ -49,6 +49,16 @@ karavictl tenant create --name Finance --insecure --addr tenant.csm-authorizatio
 >__Note__: 
 > - The `insecure` flag specifies to skip certificate validation when connecting to the tenant service. Run `karavictl tenant create --help` for help.
 
+> - For the Powerflex Pre-approved Guid feature, the `approvesdc` boolean flag is `true` by default. If the `approvesdc` flag is false for a tenant, the proxy server will deny the requests to approve SDC if the SDCs are already in not-approved state. Inorder to change this flag for an already created tenant, see `tenant update` command in CLI section.
+
+```yaml
+# RPM Deployment
+karavictl tenant create --name Finance --approvesdc=false --insecure --addr grpc.DNS-hostname:443
+
+# Helm Deployment
+karavictl tenant create --name Finance --approvesdc=false --insecure --addr tenant.csm-authorization.com:<ingress-nginx-controller-port>
+```
+
 ### Configuring Roles
 
 A `role` consists of a name, the storage to use, and the quota limit for the storage pool to be used. For example, to create a role named `FinanceRole` using the PowerFlex storage created above with a quota limit of 100GB in storage pool `myStoragePool`: