All 29 RBAC questions
More in RBAC
What is RBAC in ArgoCD? What are the built-in roles in ArgoCD? What is the policy.default setting? How do you give a group admin access via RBAC? What is the difference between ArgoCD RBAC and Kubernetes RBAC? How do you bind a user (not a group) to a role? How is an ArgoCD RBAC policy rule structured? How do you scope RBAC to specific projects and applications? How does ArgoCD integrate with SSO for authentication? What is the exec resource in RBAC and why is it sensitive?
Advertisement
Back to results for “Applications”
ArgoCD › RBAC

Where is ArgoCD RBAC configured?

Beginner

Answer

RBAC policy lives in the argocd-rbac-cm ConfigMap, with keys policy.csv (the rules), policy.default (fallback role), and scopes (which token claims to use for group mapping). Changes take effect without restart. Managing it declaratively (in Git) keeps access control itself under GitOps.
data:
  policy.default: role:readonly
  policy.csv: |
    g, my-team, role:admin
Real-world example Access control changes go through a PR to the argocd-rbac-cm manifest, so permissions are reviewed and versioned.

Common follow-ups: What keys does argocd-rbac-cm have? | Do RBAC changes need a restart?

RBAC GitOps Principles Applications
All 29 RBAC questions