7.3. Examples of granting roles to service accounts

You can modify the service accounts for the current project. For example, to add the view role to the robot service account in the top-secret project:

oc policy add-role-to-user view system:serviceaccount:top-secret:robot

$ oc policy add-role-to-user view system:serviceaccount:top-secret:robot

You can also grant access to a specific service account in a project. For example, from the project to which the service account belongs, use the -z flag and specify the <service_account_name>

oc policy add-role-to-user <role_name> -z <service_account_name>

$ oc policy add-role-to-user <role_name> -z <service_account_name>

To modify a different namespace, you can use the -n option to indicate the project namespace it applies to, as shown in the following examples.