v2/config/rbac/resourcegroup_viewer_role.yaml (19 lines of code) (raw):

# permissions for end users to view resourcegroups. apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: resourcegroup-viewer-role rules: - apiGroups: - microsoft.resources.azure.com resources: - resourcegroups verbs: - get - list - watch - apiGroups: - microsoft.resources.azure.com resources: - resourcegroups/status verbs: - get