"who-can" takes an API verb and resource, not a role name (something like
`who-can get pods`). I think it's only listing the users who can do any
verb (*) on any resource (*).

On Wed, Jun 15, 2016 at 11:57 AM, Stéphane Klein <
[email protected]> wrote:

> Hi,
>
> I try to append role to user:
>
> ```
> $ oc policy add-role-to-user admin user1  -n myproject
> $ oc policy who-can admin myproject
> Namespace: myproject
> Verb:      admin
> Resource:  myproject
>
> Users:  admin
>         sklein
>
> Groups: system:cluster-admins
>         system:masters
> ```
>
> I don't understand why user1 isn't in who-can user list ?
>
> Where is my mistake ?
>
> Best regards,
> Stéphane
> --
> Stéphane Klein <[email protected]>
> blog: http://stephane-klein.info
> cv : http://cv.stephane-klein.info
> Twitter: http://twitter.com/klein_stephane
>
> _______________________________________________
> users mailing list
> [email protected]
> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>
>
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Reply via email to