← Back

Pods (0)

No pods running as this ServiceAccount.

Jobs running as this ServiceAccount (0)

None.

CronJobs running as this ServiceAccount (0)

None.

Surviving grants for this absent ServiceAccount

The ServiceAccount object is gone, but these grants still address its principal. Recreating the SA with the same name reactivates them.

Bindings referencing this ServiceAccount

Every binding whose subject list names this SA — split by scope.

RoleBindings in legacy-pipelines (0)

None.

RoleBindings in other namespaces (0)

None.

ClusterRoleBindings (1)

Direct SCC eligibility (2)

SCCs this ServiceAccount can use because its principal is listed directly in scc.users, or because scc.groups includes a group the principal belongs to (system:authenticated, system:serviceaccounts, or system:serviceaccounts:legacy-pipelines). This is not the full effective SCC set — RBAC use grants on securitycontextconstraints objects also admit pods, and those are listed on each SCC's detail page under Potential subjects.

Reach

Where this subject's permissions land. Cluster-wide grants reach every namespace; namespace-scoped grants are listed individually.

Cluster-wide (1)

Effective permissions (1 path)

Each path is one (role, scope, group-membership) combination. Click Show rules to see the underlying API rules.