#56306·rancher

[RFE] Specify cluster scoped permissions for a project role template

Author: JonCrowtherCreated Jul 29, 2026Updated Sep 17, 2026
Labelskind/enhancementarea/rbacJIRAteam/collie

https://jira.suse.com/browse/SURE-11886

Is your feature request related to a problem? Please describe. When I give permissions to a user, I often need to create a cluster role template to provide cluster scoped permissions, and project role templates to provide project scoped permissions. However, there are a handful of "promoted rules" that give a project role template cluster scoped permissions. This makes it easier to manage since I don't have to create 2 different role templates + a CRTB and a PRTB.

Describe the solution you'd like I'd like to specify my own "promoted rules" that give a project role template cluster scoped permissions. That way I can create project roles for my users and give them some form of access to cluster scoped resources that they may need.

Describe alternatives you've considered It's currently possible by assigning a cluster role and a project role to a user. This just provides a simplified method.

Additional context It also will help avoid confusion about "promoted rules" in the first place since users might not intend to give cluster wide access to the handful of hard coded resources we provide. There's no documentation about such a feature.