Detailed instructions to impersonate service accounts

docs/web/projects/quota-for-project-space.md

@@ -3,14 +3,20 @@
 To check the quota for your project you need to impersonate the **Service Account** holder of the project.
  
 
-Log into lxplus, and run the eos command:
+1. Log into lxplus with your Primary Account
+2. Impersonate the relevant Service Account by obtaining a kerberos token:
+```bash
+kinit <your-service-account>
 ```
+3. Run the eos command:
+```bash
 eos root://eosproject.cern.ch quota /eos/project/<initial>/<project-name>
 ```
 ![](../../assets/images/project-quota-1.png) 
- 
-In the example, project swanee is using the quota as follows: 9.81 MB of the allowed 1.00 TB; 78 files of the allowed 1.00M files:
-```
+
+In the example, project "swanee" is using the quota as follows: 9.81 MB of the allowed 1.00 TB; 78 files of the allowed 1.00M files:
+
+```bash
 [swanee@lxplus701 ~]$ eos root://eosproject.cern.ch quota /eos/project/s/swanee
 # pre-configuring default route to /eos/user/s/swanee/
 # -use $EOSHOME variable to override
@@ -33,6 +39,6 @@ By group:
 
 ```
 
-It is possible to define the EOS_MGM_URL=root://eosproject.cern.ch variable beforehand. In which case, you would not need root://eosproject.cern.ch in the EOS command.
-
+Note that until you obtain again a kerberos token for your Primary Account, any further command you issue in that lxplus session will be executed with the Service Account's credentials.
 
+It is possible to define the `EOS_MGM_URL=root://eosproject.cern.ch` variable beforehand. In which case, you would not need `root://eosproject.cern.ch` in the EOS command.