Permissions granted by dedicated-admin

dedicated-admin

$ oc describe clusterrole/dedicated-cluster-admin
Name:						dedicated-cluster-admin
Created:					11 months ago
Labels:						<none>
Annotations:					authorization.openshift.io/system-only=true
Verbs						Non-Resource URLs	Resource Names	API Groups			Resources
[create delete get list patch update watch]	[]			[]		[ user.openshift.io]		[groups identities useridentitymappings users]
[create delete get list patch update watch]	[]			[]		[ authorization.openshift.io]	[clusterrolebindings rolebindings]
[create delete get list patch update watch]	[]			[]		[rbac.authorization.k8s.io]	[clusterrolebindings rolebindings]
[create delete get list patch update watch]	[]			[]		[ oauth.openshift.io]		[oauthclients]
[delete get list watch]				[]			[]		[ oauth.openshift.io]		[oauthclientauthorizations]
[create]					[]			[]		[ authorization.openshift.io]	[resourceaccessreviews subjectaccessreviews]
[create]					[]			[]		[authorization.k8s.io]		[subjectaccessreviews]
[create]					[]			[]		[ project.openshift.io]		[projectrequests]
[get list watch]				[]			[]		[]				[events minions nodes persistentvolumes pods]
[get list watch]				[]			[]		[ security.openshift.io]	[securitycontextconstraints]
[get list watch]				[]			[]		[ quota.openshift.io]		[clusterresourcequotas]
[get list]					[]			[]		[ authorization.openshift.io]	[clusterpolicybindings]
[get list watch]				[]			[]		[ image.openshift.io]		[images imagestreamtags]
[get list update]				[]			[]		[ network.openshift.io]		[netnamespaces]
[get list]					[]			[]		[ network.openshift.io]		[clusternetworks]
[get list watch]				[]			[]		[ build.openshift.io]		[buildconfigs builds]


$ oc describe clusterrole/dedicated-project-admin
Name:						dedicated-project-admin
Created:					11 months ago
Labels:						<none>
Annotations:					authorization.openshift.io/system-only=true
Verbs						Non-Resource URLs	Resource Names	API Groups		Resources
[create delete get list patch update watch]	[]			[]		[]			[limitranges resourcequotas]
[create delete get list patch update watch]	[]			[]		[ network.openshift.io]	[egressnetworkpolicies]
[create delete get list patch update watch]	[]			[]		[extensions]		[daemonsets]