Static mock demo. This page uses a small bundled sample dataset. It does not connect to a cluster, run oc, or read local credentials.

Group system:authenticated:oauth virtual

Virtual / system group. Synthesized by the apiserver — no Group object exists; membership is computed per-request from the authenticated identity. The bindings below are the authoritative description of what this name currently grants. There is no Group object on the cluster — oc get group system:authenticated:oauth will return nothing. Bindings to this name still take effect at request time.

Reach

Where this subject's permissions land. Cluster-wide grants reach every namespace; namespace-scoped grants are listed individually.

Cluster-wide (1)

Role	Via	Binding
view	direct	ClusterRoleBinding/oauth-users-self-review

Effective permissions (1 path)

Each path is one (role, scope, group-membership) combination. Click Show rules to see the underlying API rules.

Cluster-wide 1 rule

Group system:authenticated:oauth

bound by

ClusterRoleBinding oauth-users-self-review

grants

ClusterRole view

Verbs: getlistwatch Resources: podsservices API groups: core

API group	Resources	Verbs
core	pods, services	get, list, watch