diff --git a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md index 820766366d5..e72bb00b8f7 100644 --- a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md +++ b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md @@ -2,7 +2,7 @@ title: Global Resources --- - + @@ -39,6 +39,6 @@ Please see the list below to determine what permissions you may need when creati | management.cattle.io | roletemplates | Template for custom roles managing project- or cluster-specific permissions | | management.cattle.io | settings | Setting controlling Rancher behaviour | | management.cattle.io | tokens | Raw API key, old style. | -| management.cattle.io | userattributes | Additional information about a managed User | +| management.cattle.io | userattributes | Additional information about a managed User | | management.cattle.io | users | User known to and managed by Rancher | | telemetry.cattle.io | secretrequests | Request creation of a secret with arbitrary name, in any namespace | diff --git a/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md b/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md index b289dbe8341..6d8b0d4ba1c 100644 --- a/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md +++ b/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md @@ -110,6 +110,8 @@ You can create custom GlobalRoles to satisfy use cases not directly addressed by Create custom GlobalRoles through the UI or through automation (such as the Rancher Kubernetes API). You can specify the same type of rules as the rules for upstream roles and clusterRoles. +See the list [Global Resources](global-resources.md) for relevant resources. + #### Escalate and Bind verbs When giving permissions on GlobalRoles, keep in mind that Rancher respects the `escalate` and `bind` verbs, in a similar fashion to [Kubernetes](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#restrictions-on-role-creation-or-update). diff --git a/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md b/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md new file mode 100644 index 00000000000..165da41ef56 --- /dev/null +++ b/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md @@ -0,0 +1,39 @@ +--- +title: Global Resources1 +--- + + + + + +Global Resources are non-namespaced resources provided by Rancher. Users who are +cluster-owners/project-owners do not have access to several of these by +default. For example principals and roletemplates. + +The resources are documented here to support administrators creating and/or +modifying custom sets of permissions with finding the minimum set of permissions +needed for a particular task in the dashboard. + +As an example, to use the cluster/project permissions pages of the dashboard +requires permissions on principals to search/display a readable name for users, +and on roleTemplates, to see a list of usable roleTemplates as well as to +display a readable name for the role. + +Please see the list below to determine what permissions you may need when creating a least-privilege user. + +| Group | Resource | Purpose | +| -------------------- | ------------------------------ | --------------------------------------------------------------------------- | +| auditlog.cattle.io | auditpolicies | Specification of log filers, redactions, verbosity | +| catalog.cattle.io | clusterrepos | Helm chart repository location and credentials | +| management.cattle.io | authconfigs | Configuration of external auth service providers | +| management.cattle.io | clusters | Remote cluster management | +| management.cattle.io | features | Feature controlling rancher behaviour | +| management.cattle.io | globalrolebindings | Binding of user/group to a global role | +| management.cattle.io | globalroles | Custom role for global permissions (applied local and remote) | +| management.cattle.io | nodedrivers | Configuration of driver to provision clusters with a cloud service provider | +| management.cattle.io | roletemplates | Template for custom roles managing project- or cluster-specific permissions | +| management.cattle.io | settings | Setting controlling Rancher behaviour | +| management.cattle.io | tokens | Raw API key, old style. | +| management.cattle.io | userattributes | Additional information about a managed User | +| management.cattle.io | users | User known to and managed by Rancher | +| telemetry.cattle.io | secretrequests | Request creation of a secret with arbitrary name, in any namespace | diff --git a/versioned_docs/version-2.11/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md b/versioned_docs/version-2.11/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md index bcbfa624eb7..724dcc7e410 100644 --- a/versioned_docs/version-2.11/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md +++ b/versioned_docs/version-2.11/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md @@ -114,6 +114,8 @@ You can create custom GlobalRoles to satisfy use cases not directly addressed by Create custom GlobalRoles through the UI or through automation (such as the Rancher Kubernetes API). You can specify the same type of rules as the rules for upstream roles and clusterRoles. +See the list [Global Resources](global-resources.md) for relevant resources. + #### Escalate and Bind verbs When giving permissions on GlobalRoles, keep in mind that Rancher respects the `escalate` and `bind` verbs, in a similar fashion to [Kubernetes](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#restrictions-on-role-creation-or-update). diff --git a/versioned_docs/version-2.11/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md b/versioned_docs/version-2.11/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md new file mode 100644 index 00000000000..165da41ef56 --- /dev/null +++ b/versioned_docs/version-2.11/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md @@ -0,0 +1,39 @@ +--- +title: Global Resources1 +--- + + + + + +Global Resources are non-namespaced resources provided by Rancher. Users who are +cluster-owners/project-owners do not have access to several of these by +default. For example principals and roletemplates. + +The resources are documented here to support administrators creating and/or +modifying custom sets of permissions with finding the minimum set of permissions +needed for a particular task in the dashboard. + +As an example, to use the cluster/project permissions pages of the dashboard +requires permissions on principals to search/display a readable name for users, +and on roleTemplates, to see a list of usable roleTemplates as well as to +display a readable name for the role. + +Please see the list below to determine what permissions you may need when creating a least-privilege user. + +| Group | Resource | Purpose | +| -------------------- | ------------------------------ | --------------------------------------------------------------------------- | +| auditlog.cattle.io | auditpolicies | Specification of log filers, redactions, verbosity | +| catalog.cattle.io | clusterrepos | Helm chart repository location and credentials | +| management.cattle.io | authconfigs | Configuration of external auth service providers | +| management.cattle.io | clusters | Remote cluster management | +| management.cattle.io | features | Feature controlling rancher behaviour | +| management.cattle.io | globalrolebindings | Binding of user/group to a global role | +| management.cattle.io | globalroles | Custom role for global permissions (applied local and remote) | +| management.cattle.io | nodedrivers | Configuration of driver to provision clusters with a cloud service provider | +| management.cattle.io | roletemplates | Template for custom roles managing project- or cluster-specific permissions | +| management.cattle.io | settings | Setting controlling Rancher behaviour | +| management.cattle.io | tokens | Raw API key, old style. | +| management.cattle.io | userattributes | Additional information about a managed User | +| management.cattle.io | users | User known to and managed by Rancher | +| telemetry.cattle.io | secretrequests | Request creation of a secret with arbitrary name, in any namespace | diff --git a/versioned_docs/version-2.12/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md b/versioned_docs/version-2.12/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md index bcbfa624eb7..724dcc7e410 100644 --- a/versioned_docs/version-2.12/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md +++ b/versioned_docs/version-2.12/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md @@ -114,6 +114,8 @@ You can create custom GlobalRoles to satisfy use cases not directly addressed by Create custom GlobalRoles through the UI or through automation (such as the Rancher Kubernetes API). You can specify the same type of rules as the rules for upstream roles and clusterRoles. +See the list [Global Resources](global-resources.md) for relevant resources. + #### Escalate and Bind verbs When giving permissions on GlobalRoles, keep in mind that Rancher respects the `escalate` and `bind` verbs, in a similar fashion to [Kubernetes](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#restrictions-on-role-creation-or-update). diff --git a/versioned_docs/version-2.12/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md b/versioned_docs/version-2.12/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md new file mode 100644 index 00000000000..165da41ef56 --- /dev/null +++ b/versioned_docs/version-2.12/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md @@ -0,0 +1,39 @@ +--- +title: Global Resources1 +--- + + + + + +Global Resources are non-namespaced resources provided by Rancher. Users who are +cluster-owners/project-owners do not have access to several of these by +default. For example principals and roletemplates. + +The resources are documented here to support administrators creating and/or +modifying custom sets of permissions with finding the minimum set of permissions +needed for a particular task in the dashboard. + +As an example, to use the cluster/project permissions pages of the dashboard +requires permissions on principals to search/display a readable name for users, +and on roleTemplates, to see a list of usable roleTemplates as well as to +display a readable name for the role. + +Please see the list below to determine what permissions you may need when creating a least-privilege user. + +| Group | Resource | Purpose | +| -------------------- | ------------------------------ | --------------------------------------------------------------------------- | +| auditlog.cattle.io | auditpolicies | Specification of log filers, redactions, verbosity | +| catalog.cattle.io | clusterrepos | Helm chart repository location and credentials | +| management.cattle.io | authconfigs | Configuration of external auth service providers | +| management.cattle.io | clusters | Remote cluster management | +| management.cattle.io | features | Feature controlling rancher behaviour | +| management.cattle.io | globalrolebindings | Binding of user/group to a global role | +| management.cattle.io | globalroles | Custom role for global permissions (applied local and remote) | +| management.cattle.io | nodedrivers | Configuration of driver to provision clusters with a cloud service provider | +| management.cattle.io | roletemplates | Template for custom roles managing project- or cluster-specific permissions | +| management.cattle.io | settings | Setting controlling Rancher behaviour | +| management.cattle.io | tokens | Raw API key, old style. | +| management.cattle.io | userattributes | Additional information about a managed User | +| management.cattle.io | users | User known to and managed by Rancher | +| telemetry.cattle.io | secretrequests | Request creation of a secret with arbitrary name, in any namespace | diff --git a/versioned_docs/version-2.13/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md b/versioned_docs/version-2.13/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md index bcbfa624eb7..724dcc7e410 100644 --- a/versioned_docs/version-2.13/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md +++ b/versioned_docs/version-2.13/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md @@ -114,6 +114,8 @@ You can create custom GlobalRoles to satisfy use cases not directly addressed by Create custom GlobalRoles through the UI or through automation (such as the Rancher Kubernetes API). You can specify the same type of rules as the rules for upstream roles and clusterRoles. +See the list [Global Resources](global-resources.md) for relevant resources. + #### Escalate and Bind verbs When giving permissions on GlobalRoles, keep in mind that Rancher respects the `escalate` and `bind` verbs, in a similar fashion to [Kubernetes](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#restrictions-on-role-creation-or-update). diff --git a/versioned_docs/version-2.13/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md b/versioned_docs/version-2.13/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md new file mode 100644 index 00000000000..764d55d0148 --- /dev/null +++ b/versioned_docs/version-2.13/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md @@ -0,0 +1,44 @@ +--- +title: Global Resources1 +--- + + + + + +Global Resources are non-namespaced resources provided by Rancher. Users who are +cluster-owners/project-owners do not have access to several of these by +default. For example principals and roletemplates. + +The resources are documented here to support administrators creating and/or +modifying custom sets of permissions with finding the minimum set of permissions +needed for a particular task in the dashboard. + +As an example, to use the cluster/project permissions pages of the dashboard +requires permissions on principals to search/display a readable name for users, +and on roleTemplates, to see a list of usable roleTemplates as well as to +display a readable name for the role. + +Please see the list below to determine what permissions you may need when creating a least-privilege user. + +| Group | Resource | Purpose | +| -------------------- | ------------------------------ | --------------------------------------------------------------------------- | +| auditlog.cattle.io | auditpolicies | Specification of log filers, redactions, verbosity | +| catalog.cattle.io | clusterrepos | Helm chart repository location and credentials | +| ext.cattle.io | groupmembershiprefreshrequests | Creation triggers refresh of group membership for specific or all users | +| ext.cattle.io | kubeconfigs | Kubeconfig file for access to remote clusters | +| ext.cattle.io | passwordchangerequests | Creation triggers update of the referenced User's password | +| ext.cattle.io | selfusers | Get delivers User making the request | +| ext.cattle.io | tokens | Raw API key. See Kubeconfig for wrapped API keys | +| management.cattle.io | authconfigs | Configuration of external auth service providers | +| management.cattle.io | clusters | Remote cluster management | +| management.cattle.io | features | Feature controlling rancher behaviour | +| management.cattle.io | globalrolebindings | Binding of user/group to a global role | +| management.cattle.io | globalroles | Custom role for global permissions (applied local and remote) | +| management.cattle.io | nodedrivers | Configuration of driver to provision clusters with a cloud service provider | +| management.cattle.io | roletemplates | Template for custom roles managing project- or cluster-specific permissions | +| management.cattle.io | settings | Setting controlling Rancher behaviour | +| management.cattle.io | tokens | Raw API key, old style. | +| management.cattle.io | userattributes | Additional information about a managed User | +| management.cattle.io | users | User known to and managed by Rancher | +| telemetry.cattle.io | secretrequests | Request creation of a secret with arbitrary name, in any namespace | diff --git a/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md b/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md index b289dbe8341..6d8b0d4ba1c 100644 --- a/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md +++ b/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md @@ -110,6 +110,8 @@ You can create custom GlobalRoles to satisfy use cases not directly addressed by Create custom GlobalRoles through the UI or through automation (such as the Rancher Kubernetes API). You can specify the same type of rules as the rules for upstream roles and clusterRoles. +See the list [Global Resources](global-resources.md) for relevant resources. + #### Escalate and Bind verbs When giving permissions on GlobalRoles, keep in mind that Rancher respects the `escalate` and `bind` verbs, in a similar fashion to [Kubernetes](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#restrictions-on-role-creation-or-update). diff --git a/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md b/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md new file mode 100644 index 00000000000..165da41ef56 --- /dev/null +++ b/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources.md @@ -0,0 +1,39 @@ +--- +title: Global Resources1 +--- + + + + + +Global Resources are non-namespaced resources provided by Rancher. Users who are +cluster-owners/project-owners do not have access to several of these by +default. For example principals and roletemplates. + +The resources are documented here to support administrators creating and/or +modifying custom sets of permissions with finding the minimum set of permissions +needed for a particular task in the dashboard. + +As an example, to use the cluster/project permissions pages of the dashboard +requires permissions on principals to search/display a readable name for users, +and on roleTemplates, to see a list of usable roleTemplates as well as to +display a readable name for the role. + +Please see the list below to determine what permissions you may need when creating a least-privilege user. + +| Group | Resource | Purpose | +| -------------------- | ------------------------------ | --------------------------------------------------------------------------- | +| auditlog.cattle.io | auditpolicies | Specification of log filers, redactions, verbosity | +| catalog.cattle.io | clusterrepos | Helm chart repository location and credentials | +| management.cattle.io | authconfigs | Configuration of external auth service providers | +| management.cattle.io | clusters | Remote cluster management | +| management.cattle.io | features | Feature controlling rancher behaviour | +| management.cattle.io | globalrolebindings | Binding of user/group to a global role | +| management.cattle.io | globalroles | Custom role for global permissions (applied local and remote) | +| management.cattle.io | nodedrivers | Configuration of driver to provision clusters with a cloud service provider | +| management.cattle.io | roletemplates | Template for custom roles managing project- or cluster-specific permissions | +| management.cattle.io | settings | Setting controlling Rancher behaviour | +| management.cattle.io | tokens | Raw API key, old style. | +| management.cattle.io | userattributes | Additional information about a managed User | +| management.cattle.io | users | User known to and managed by Rancher | +| telemetry.cattle.io | secretrequests | Request creation of a secret with arbitrary name, in any namespace | diff --git a/versioned_sidebars/version-2.10-sidebars.json b/versioned_sidebars/version-2.10-sidebars.json index de8f339d4bb..58d0463c951 100644 --- a/versioned_sidebars/version-2.10-sidebars.json +++ b/versioned_sidebars/version-2.10-sidebars.json @@ -261,6 +261,7 @@ }, "items": [ "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions", + "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles" diff --git a/versioned_sidebars/version-2.11-sidebars.json b/versioned_sidebars/version-2.11-sidebars.json index 67fbc6761e2..78a6c24eeac 100644 --- a/versioned_sidebars/version-2.11-sidebars.json +++ b/versioned_sidebars/version-2.11-sidebars.json @@ -261,6 +261,7 @@ }, "items": [ "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions", + "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles" diff --git a/versioned_sidebars/version-2.12-sidebars.json b/versioned_sidebars/version-2.12-sidebars.json index ce1e737abd6..9a216113b02 100644 --- a/versioned_sidebars/version-2.12-sidebars.json +++ b/versioned_sidebars/version-2.12-sidebars.json @@ -260,6 +260,7 @@ }, "items": [ "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions", + "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles" diff --git a/versioned_sidebars/version-2.13-sidebars.json b/versioned_sidebars/version-2.13-sidebars.json index 55d1d43b237..03502a2d149 100644 --- a/versioned_sidebars/version-2.13-sidebars.json +++ b/versioned_sidebars/version-2.13-sidebars.json @@ -261,6 +261,7 @@ }, "items": [ "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions", + "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles" diff --git a/versioned_sidebars/version-2.9-sidebars.json b/versioned_sidebars/version-2.9-sidebars.json index 175b20f61e3..3829a4d9b6d 100644 --- a/versioned_sidebars/version-2.9-sidebars.json +++ b/versioned_sidebars/version-2.9-sidebars.json @@ -261,6 +261,7 @@ }, "items": [ "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions", + "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-resources", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles", "how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles"