Control user access to extensions
A cluster extension managed by Operator Lifecycle Manager (OLM) v1 can provide CustomResourceDefinition (CRD) objects that expose new cluster APIs. Cluster administrators automatically have full access to these resources, but OLM v1 does not configure role-based access control (RBAC) for regular users, so you must define the policy that lets them create, view, or edit the extension’s custom resources.