- Home
- All questions
- Question 597
CKA study material · question 597 of 1000
You want a team lead to be able to grant the admin, edit and view roles in their own namespace without holding those permissions themselves. Which verb makes that possible?
Show the answer
Answer: C. bind on the named ClusterRoles
Creating a binding requires either holding everything the referenced role grants or holding the bind verb on that particular role, which is how delegation is done without conferring the permissions themselves.
Source: Using RBAC Authorization (Kubernetes) — Privilege escalation prevention and bootstrapping › Restrictions on role binding creation or update