All 29 RBAC questions
More in RBAC
What are the built-in roles in ArgoCD? Where is ArgoCD RBAC configured? What is the policy.default setting? How do you give a group admin access via RBAC? What is the difference between ArgoCD RBAC and Kubernetes RBAC? How do you bind a user (not a group) to a role? How is an ArgoCD RBAC policy rule structured? How do you scope RBAC to specific projects and applications? How does ArgoCD integrate with SSO for authentication? What is the exec resource in RBAC and why is it sensitive?
Advertisement
Back to results for “Multi-cluster”
ArgoCD › RBAC

What is RBAC in ArgoCD?

Beginner

Answer

ArgoCD RBAC controls what authenticated users and groups can do within ArgoCD—viewing, syncing, creating, or deleting Applications, and managing clusters, repos, and projects. It's separate from Kubernetes RBAC (which governs cluster resource access) and is defined in the argocd-rbac-cm ConfigMap using policy rules and roles.
# argocd-rbac-cm
data:
  policy.default: role:readonly
Real-world example Developers get a role that can view and sync their team's apps but not delete clusters or edit other teams' apps.

Common follow-ups: How does ArgoCD RBAC differ from Kubernetes RBAC? | Where is it configured?

Applications Multi-cluster RBAC
All 29 RBAC questions