docs: say that a snapshotter can tag environments

[sami-alajrami]

Say on the role pages that a snapshotter can set and remove tags on an environment, which
the server allows from kosli-dev/server#7418. The permissions matrix now has a row for
tagging environments, open to snapshotters, and one for flows, repos and controls, which
stays with members and above.

Part of kosli-dev/server#7416

🤖 Generated with Claude Code

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated
kosli	🟢 Ready	View Preview	Oct 14, 2026, 1:22 PM

[sami-alajrami]

Merge order

Merge after kosli-dev/server#7418 is deployed, or the docs describe a permission a snapshotter key does not yet have.

Pages touched

• administration/managing_users/roles_in_kosli.md: overview table, permissions matrix, the API footnote, and the Snapshotter section (a Tags line, and the "cannot change an environment" line now excepts tags).
• administration/authentication/service_accounts.md and implementation_guide/phase_1/roles_and_responsibilities/overview.md: the one-line role summaries.

[claude]

Claude finished @sami-alajrami's task in 36s —— View job

---

Doc review

• Read the diff and each changed file at the branch head
• Checked the change against the rest of the site (snapshotter mentions, the kosli tag reference)
• Posted the review

No findings cleared the bar. The snapshotter tagging change is applied consistently in all three changed files, and no other page on the site contradicts it. The full review is in this comment.

[claude]

Doc review

No findings cleared the bar. The tagging change is applied consistently across all three role pages: the summary table, the permissions matrix, the † footnote and the Snapshotter accordion on roles_in_kosli.md, plus the role lists in service_accounts.md and the implementation guide overview. kosli tag environment is a valid form according to client_reference/kosli_tag.md, and no other page on the site describes what a snapshotter can do in a way that this change contradicts. The PR adds no links.

0 Critical, 0 Improvement, 0 Suggestion. This review is advisory only and does not block the merge.