All 29 RBAC questions
More in RBAC
How is an ArgoCD RBAC policy rule structured? How do you scope RBAC to specific projects and applications? How does ArgoCD integrate with SSO for authentication? What is the exec resource in RBAC and why is it sensitive? What resources can ArgoCD RBAC control besides applications? How do you create a read-only role scoped to one project? What is a local account and when would you use one? How do you manage RBAC declaratively under GitOps? How do you restrict which repositories a project can use? How do you prevent a team from deploying to namespaces they don't own?
Advertisement
ArgoCD › RBAC

What actions can be controlled for the applications resource?

Intermediate

Answer

For applications you can control get (view), create, update, delete, sync, override (override a running operation), and action/* (run resource actions like restart). Fine-grained control lets you, for example, allow developers to view and sync but reserve create/delete for platform admins.
p, role:dev, applications, action/apps/Deployment/restart, '*/*', allow
Real-world example Developers are allowed to restart Deployments via ArgoCD actions but not to delete applications.

Common follow-ups: What does the override action do? | How do resource actions fit RBAC?

Applications Sync & Health RBAC
All 29 RBAC questions