SCAL-288927

Author: ShashiSubramanya

modules/ROOT/pages/abac_rls-variables.adoc

@@ -362,8 +362,7 @@ ABAC details are sent in a JWT that can be used as a bearer token for cookieless
 ====
 
 === Verify the variable assignment
-
-To verify the variable assignment, use the `POST /api/rest/2.0/users/search` API call and check `variable_values` in the user properties in the API response.
+To retrieve user information and object properties, you can use the `POST /api/rest/2.0/users/search` API call. To include variable details in the response, set the `include_variable_values` parameter to `true` in the API request body. This allows you to fetch variable values associated with the user in the specified context.
 
 [source,JSON]
 ----
@@ -395,7 +394,10 @@ To verify the variable assignment, use the `POST /api/rest/2.0/users/search` API
 }
 ----
 
-To verify the security entitlements, start a user session using the JWT and inspect the generated SQL for your query or visualization.
+You can also use the `POST /api/rest/2.0/template/variables/search` API call to xref:variables.adoc#_get_variables[get the list of variables] assigned to a specific user, Org, and Model.
+
+==== Updating variable values for a user
+To update variable values for a user, you can use the `/api/rest/2.0/template/variables/update-values` endpoint, or `/api/rest/2.0/auth/token/custom` endpoint when logging in the user. Do not use the `/api/rest/2.0/users/{user_identifier}/update` endpoint, as it does not support updating variable values.
 
 == Verify the entitlements
 To verify the entitlements: