Give organization admins the option to manage rolebindings

appuio · Jan 31, 2022 · 9374f9b · 9374f9b
1 parent 86b152d
commit 9374f9b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/config/user-rbac/organization-admin-role.yml b/config/user-rbac/organization-admin-role.yml
@@ -9,3 +9,6 @@ rules:
 - apiGroups: ["appuio.io"] 
   resources: ["organizationmembers"]
   verbs: ["get", "watch", "list", "patch", "edit", "create"]
+- apiGroups: ["rbac.authorization.k8s.io"]
+  resources: ["rolebindings"]
+  verbs: ["get", "watch", "list", "patch", "edit", "create"]