RBAC
Browse ServiceAccounts, Roles, ClusterRoles, and their bindings to understand who can do what.
The RBAC page shows ServiceAccounts, Roles, ClusterRoles, and their bindings for the current cluster.
ServiceAccounts
ServiceAccounts are identities in the current namespace. The detail view reflects API fields, including image pull secrets when present; modern clusters do not necessarily create generated token Secrets.
Roles and ClusterRoles
Roles and ClusterRoles hold the permissions attached to those identities. The detail view expands the rules array into a readable table with apiGroups, resources, verbs, and resourceNames.
RoleBindings and ClusterRoleBindings
RoleBindings and ClusterRoleBindings show which subjects point at each role. The list shows the role reference and the subjects, including users, groups, and ServiceAccounts.
Troubleshooting permissions
Use Can I on the Roles page to run a SelfSubjectAccessReview for a verb, resource, namespace, group, subresource, and optional name. It checks the current kubeconfig identity, not an arbitrary Pod ServiceAccount.