Static mock demo. This page uses a small bundled sample dataset. It does not connect to a cluster, run oc, or read local credentials.

SCC anyuid

Configuration

priority	10
allowPrivilegedContainer	False
allowPrivilegeEscalation	True
allowHostNetwork	False
allowHostPID	False
allowHostIPC	False
readOnlyRootFilesystem
runAsUser.type	RunAsAny

Granted to

Users (2)

Groups (2)

engineers
system:serviceaccounts:mine-platform

Resurrectable ServiceAccount grants (1)

These entries in scc.users address a ServiceAccount that no longer exists. SCC admission matches by name string, so recreating the SA reactivates this SCC's posture for any pod the SA admits.

Principal	Created	Namespace	State
system:serviceaccount:ci:pipeline	1y	ci	namespace present SA missing

Pods admitted under this SCC (3)

Expandable summaries below show namespaces, images, and every pod admitted with this SCC. Click a summary row to open the table.

By namespace (2)

Namespace	Pods
mine-platform	2
ci	1

By image (3)

Image	Registry	Containers
docker.io/library/nginx:1.25	docker.io	2
…openshift-image-registry.svc:5000/mine-platform/api:latest	image-registry.openshift-image-registry.svc:5000	1
quay.io/buildah/stable:v1.35	quay.io	1

All admitted pods (3)

ServiceAccount	Pod	Namespace	Phase	Owner	Created
builder	build-run-1	ci	Running	Job/build-run-1	1y
builder	api-2	mine-platform	Running	ReplicaSet/api	1y
builder	api-1	mine-platform	Running	ReplicaSet/api	1y

Subjects that can use this SCC (4 of 15)

Direct SCC grants and RBAC use grants. Ghost ServiceAccounts here are potential admissions: recreating the same SA name reactivates the SCC grant.

All kinds 15 Users 4 Groups 4 ServiceAccounts 7

Subject	Created	State	Granted via	Scope / note
User alice	1y	user present	ClusterRoleBinding/platform-admins-cluster-admin (via platform-admins) (RBAC use grant) role cluster-admin	can use this SCC now if authenticated
User nina-onboarding ghost	1y	user missing	scc.groups/engineers (SCC group list)	future user with this name would inherit access that can use this SCC
User alice	1y	user present	scc.groups/engineers (SCC group list)	can use this SCC now if authenticated
User eve	1y	user present	scc.groups/engineers (SCC group list)	can use this SCC now if authenticated