change the placement of Support user permissions in manage users and teams

Author: sivanel97

docs/sso-rbac/users-and-teams/manage-users-teams.md

@@ -53,30 +53,6 @@ These roles can be used to define specific permissions for assets in your softwa
 For example, you can define that all `Members` can create new entities from a specific blueprint, while only `Moderators` can edit them.  
 For more information and examples, see the [catalog RBAC](/build-your-software-catalog/set-catalog-rbac/) section.
 
-## Support user permissions
-
-<SupportUserPermissions/>
-
-### Access duration
-
-Support user access is enabled by default.  
-You can define how long this access will be valid: **1 week**, **1 month**, **1 year**, **Permanent access (default)**.
-
-### Support user capabilities
-
-Support users can be created with the following restrictions:
-
-- **Read-only access** - can be created as `read-only` users.
-- **Admin/edit access** - can be created as `admin` users, their actions will appear in your organization's audit log. This requires both Port manager approval and customer approval via the support user permission process.
-
-:::info Emergency access
-
-In critical situations, Port can request emergency access to your organization even if support user permissions are disabled. This requires:
-
-1. **Organization approval** - the organization admin must approve the emergency access request.
-2. **Port approval** - Internal Port approval process.
-:::
-
 ## Ownership & user management
 
 After creating a Port account, two <PortTooltip id="blueprint">blueprints</PortTooltip> will be automatically created in your [data model](https://app.getport.io/settings/data-model) - `User` and `Team`.
@@ -449,3 +425,26 @@ Port service accounts are treated like any other users and extend the same RBAC
 Service accounts can easily be disabled at any time. To disable a service account, update it's `status` property to `Disabled`.
 Disabled service accounts can no longer generate new API tokens or use existing ones. Disabled service accounts can be re-enabled at any time by updating the `status` property back to `Active`.
 
+## Support user permissions
+
+<SupportUserPermissions/>
+
+### Access duration
+
+Support user access is enabled by default.  
+You can define how long this access will be valid: **1 week**, **1 month**, **1 year**, **Permanent access (default)**.
+
+### Support user capabilities
+
+Support users can be created with the following restrictions:
+
+- **Read-only access** - can be created as `read-only` users.
+- **Admin/edit access** - can be created as `admin` users, their actions will appear in your organization's audit log. This requires both Port manager approval and customer approval via the support user permission process.
+
+:::info Emergency access
+
+In critical situations, Port can request emergency access to your organization even if support user permissions are disabled. This requires:
+
+1. **Organization approval** - the organization admin must approve the emergency access request.
+2. **Port approval** - Internal Port approval process.
+:::