All 29 RBAC questions
More in RBAC
How do you scope RBAC to specific projects and applications? How does ArgoCD integrate with SSO for authentication? What is the exec resource in RBAC and why is it sensitive? What actions can be controlled for the applications resource? How do you create a read-only role scoped to one project? What is a local account and when would you use one? How do you manage RBAC declaratively under GitOps? How do you restrict which repositories a project can use? How do you prevent a team from deploying to namespaces they don't own? What permissions are needed to manage ApplicationSets?
Advertisement
Back to results for “Applications”
ArgoCD › RBAC

What resources can ArgoCD RBAC control besides applications?

Intermediate

Answer

RBAC covers applications, applicationsets, clusters, repositories, projects, accounts, certificates, gpgkeys, logs, and exec. This lets you separately govern who can register clusters, add repos, manage projects, view logs, or open pod shells—not just act on apps.
p, role:repo-admin, repositories, *, *, allow
Real-world example A role can manage repository connections but has no permission over clusters or app deletion.

Common follow-ups: Why separate cluster and repo permissions? | What does the logs resource control?

Multi-cluster Applications RBAC
All 29 RBAC questions