Static mock demo. This page uses a small bundled sample dataset. It does not connect to a cluster, run oc, or read local credentials.

Privileged ClusterRoles Roles Role grants Cross-namespace Who can Aggregated

Who can

Reverse RBAC lookup from Lineage's cached read-only inventory. This does not shell out to oc adm policy who-can; Lineage expands real Groups into member users and flags ghosts, baseline, and unclassified rows.

Try:

list secrets in payments-prod
get pod logs in payments-prod
use the privileged SCC
* on * (cluster-admin reach)