All 29 RBAC questions
More in RBAC
How do you give a group admin access via RBAC? What is the difference between ArgoCD RBAC and Kubernetes RBAC? How do you bind a user (not a group) to a role? How is an ArgoCD RBAC policy rule structured? How does ArgoCD integrate with SSO for authentication? What is the exec resource in RBAC and why is it sensitive? What actions can be controlled for the applications resource? What resources can ArgoCD RBAC control besides applications? How do you create a read-only role scoped to one project? What is a local account and when would you use one?
Advertisement
Back to results for “Multi-cluster”
ArgoCD › RBAC

How do you scope RBAC to specific projects and applications?

Intermediate

Answer

Use the object field as project/application with wildcards, e.g., `team-a/*` grants a role over all apps in the team-a project. Because AppProjects group apps and constrain destinations/sources, scoping RBAC by project gives clean multi-tenant boundaries—each team manages only its project's apps.
p, role:team-a, applications, *, team-a/*, allow
Real-world example Team A's role has full application actions but only within the team-a project, isolating them from other teams.

Common follow-ups: Why scope RBAC by project? | What does the object field represent?

Applications Multi-cluster RBAC
All 29 RBAC questions