Static mock demo. This page uses a small bundled sample dataset. It does not connect to a cluster, run oc, or read local credentials.

Group system:masters virtual

Virtual / system group. Synthesized by the apiserver — no Group object exists; membership is computed per-request from the authenticated identity. The bindings below are the authoritative description of what this name currently grants. There is no Group object on the cluster — oc get group system:masters will return nothing. Bindings to this name still take effect at request time.

Reach

Where this subject's permissions land. Cluster-wide grants reach every namespace; namespace-scoped grants are listed individually.

Cluster-wide (1)

Role	Via	Binding
cluster-admin	direct	ClusterRoleBinding/cluster-admin

Effective permissions (1 path)

Each path is one (role, scope, group-membership) combination. Click Show rules to see the underlying API rules.

Cluster-wide * wildcard 1 rule

Group system:masters

bound by

ClusterRoleBinding cluster-admin

grants

ClusterRole cluster-admin privileged

Verbs: * Resources: * API groups: *

API group	Resources	Verbs
*	*	*