All 29 RBAC questions
More in RBAC
What is RBAC in ArgoCD? What are the built-in roles in ArgoCD? Where is ArgoCD RBAC configured? How do you give a group admin access via RBAC? What is the difference between ArgoCD RBAC and Kubernetes RBAC? How do you bind a user (not a group) to a role? How is an ArgoCD RBAC policy rule structured? How do you scope RBAC to specific projects and applications? How does ArgoCD integrate with SSO for authentication? What is the exec resource in RBAC and why is it sensitive?
Advertisement
Back to results for “Set”
ArgoCD › RBAC

What is the policy.default setting?

Beginner

Answer

policy.default sets the role applied to any authenticated user who has no explicit grant. Setting it to role:readonly gives safe view-only default access; leaving it empty denies by default. It's the fallback that determines baseline permissions.
data:
  policy.default: role:readonly
Real-world example Unmapped SSO users get read-only access because policy.default is role:readonly.

Common follow-ups: What does an empty default do? | Why set a readonly default?

Applications Multi-cluster RBAC
All 29 RBAC questions