1. Home
2. All questions
3. Question 19

CKA study material · question 19 of 1000

A team wants to revoke a permission that a broad Role already grants, by adding a second, narrower Role. Why will that not work?

• Cluster architecture

1. RBAC permissions are purely additive and there are no deny rules
2. Roles in the same namespace cannot overlap
3. A subject may be bound to only one Role at a time
4. RBAC evaluates only the first matching rule

Challenge yourself on this topic → Study as cards