Authorization Resources

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace.

SelfSubjectAccessReview checks whether or the current user can perform an action.

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace.

SubjectAccessReview checks whether or not a user or group can perform an action.

ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.

ClusterRoleBinding references a ClusterRole, but not contain it.

Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.

RoleBinding references a role, but does not contain it.