---
title: RBAC model
slug: rbac-model
createdAt: 2026-02-24T04:06:34.730Z
---

### RBAC principles

- Least privilege by default
- Read-only initial onboarding mode
- Explicit elevation for execution-enabled workflows
- Namespace scoping where practical
- Separate permissions for analysis vs action

### Kubernetes-side RBAC

Document:

- Required API groups/resources for read operations
- Additional permissions required for execution workflows
- Optional privileges by module (upgrades, drift remediation, troubleshooting actions)

### Kubegrade app RBAC

Document:

- Owner/Admin/Developer/Viewer permissions
- Scope inheritance (org → workspace → project → cluster)
- Approval authority vs execution authority separation