AETHER-3323 update roc design notes

Change-Id: I9e0e4017e960b9e193cf000226fd5d16994bdd6f
diff --git a/operations/gui.rst b/operations/gui.rst
index 664aa2b..f0f9603 100644
--- a/operations/gui.rst
+++ b/operations/gui.rst
@@ -29,6 +29,54 @@
 
 .. note:: The *History* button will only be visible if you are in the **AetherROCAdmin** group.
 
+Logging in to the portal
+************************
+Navigating to the portal URL e.g. ``https://roc.<cluster-ingress-hostname>`` will briefly show
+an empty dashboard, before temporarily redirecting to the Authentication server's login
+page e.g. ``https://keycloak.ananki.io``
+
+.. image:: images/keycloak-login.png
+    :width: 800
+
+.. note:: The username and password are your Keycloak credentials - if you have forgotten
+    your password, please contact the system administrator.
+
+On entering the "username" and "password" you will be redirected to the dashboard.
+
+Clicking the user name in the drop down menu will display your name and the groups you belong to:
+
+.. image:: images/ops-portal-login-details.png
+    :width: 800
+
+.. note:: Click on the panel to dismiss it
+
+Clicking on the API Key, shows your Session API Key, along with the time it
+expires (in 24 hours time).
+
+.. image:: images/ops-portal-api-key.png
+    :width: 800
+
+Logging out of the portal
+*************************
+
+To log out of the portal click the "Sign Out" button at the end of the drop down menu.
+This releases all resources and redirects you to the Keycloak Account Management page,
+where you will have to click **Sign Out** to terminate the Keycloak session.
+
+.. image:: images/keycloak-account-management.png
+    :width: 800
+
+Before you "Sign Out", while still in this screen, it is possible to:
+
+* inspect your **Personal Info**,
+* configure ways to sign in
+* set up 2 factor authentication
+* change your password if required.
+* see your device activity
+
+.. note:: To return to the Operations Portal you can simply browse to the Portal's URL, or use the
+    browser's back button to return to the dashboard.
+
 .. |BASKETVIEW-NEWRANGE| image:: images/aether-roc-gui-basket-view-new-range.png
     :width: 635
     :alt: Basket View with some changes ready to be committed