All 29 RBAC questions
More in RBAC
What is RBAC in ArgoCD? Where is ArgoCD RBAC configured? What is the policy.default setting? How do you give a group admin access via RBAC? What is the difference between ArgoCD RBAC and Kubernetes RBAC? How do you bind a user (not a group) to a role? How is an ArgoCD RBAC policy rule structured? How do you scope RBAC to specific projects and applications? How does ArgoCD integrate with SSO for authentication? What is the exec resource in RBAC and why is it sensitive?
Advertisement
Back to results for “Applications”
ArgoCD › RBAC

What are the built-in roles in ArgoCD?

Beginner

Answer

ArgoCD ships two built-in roles: role:admin (full access to everything) and role:readonly (view-only). You define custom roles in the RBAC policy for finer control. The policy.default sets the fallback role for users without a specific grant (often readonly or empty to deny).
policy.default: role:readonly
Real-world example Unmapped users default to readonly, while a custom 'team-a' role grants sync rights on team-a apps only.

Common follow-ups: What does role:admin allow? | What is policy.default for?

Applications RBAC Multi-cluster
All 29 RBAC questions