anchor.diff:  ----
   $ oc describe clusterPolicyBindings :default
   ----
  +
   
   [[viewing-cluster-bindings]]
   .Viewing Cluster Bindings
  
positive.code: link:../architecture/additional_concepts/authorization.html#roles[default role]
  in a given local policy can view that project-scoped policy.
  
  [[viewing-cluster-policy]]
  
  === Viewing Cluster Policy
  
negative.code: [options="nowrap"]
  ----
  $ oc describe clusterPolicy default
  Name:					default
  Created:				5 days ago
  Labels:					<none>
  Annotations:				<none>
  Last Modified:				2016-03-17 13:25:27 -0400 EDT
  admin					Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[create delete deletecollection get list patch update watch]	[]				[]			[]				[configmaps endpoints persistentvolumeclaims pods pods/attach pods/exec pods/log pods/portforward pods/proxy replicationcontrollers replicationcontrollers/scale secrets serviceaccounts services services/proxy]
  					[create delete deletecollection get list patch update watch]	[]				[]			[]				[buildconfigs buildconfigs/instantiate buildconfigs/instantiatebinary buildconfigs/webhooks buildlogs builds builds/clone builds/custom builds/docker builds/log builds/source deploymentconfigrollbacks deploymentconfigs deploymentconfigs/log deploymentconfigs/scale deployments generatedeploymentconfigs imagestreamimages imagestreamimports imagestreammappings imagestreams imagestreams/secrets imagestreamtags localresourceaccessreviews localsubjectaccessreviews processedtemplates projects resourceaccessreviews rolebindings roles routes subjectaccessreviews templateconfigs templates]
  					[create delete deletecollection get list patch update watch]	[]				[]			[autoscaling]			[horizontalpodautoscalers]
  					[create delete deletecollection get list patch update watch]	[]				[]			[batch]				[jobs]
  					[create delete deletecollection get list patch update watch]	[]				[]			[extensions]			[daemonsets horizontalpodautoscalers jobs replicationcontrollers/scale]
  					[get list watch]						[]				[]			[]				[bindings configmaps endpoints events imagestreams/status limitranges minions namespaces namespaces/status nodes persistentvolumeclaims persistentvolumes pods pods/log pods/status policies policybindings replicationcontrollers replicationcontrollers/status resourcequotas resourcequotas/status resourcequotausages routes/status securitycontextconstraints serviceaccounts services]
  					[get update]							[]				[]			[]				[imagestreams/layers]
  					[update]							[]				[]			[]				[routes/status]
  basic-user				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get]								[]				[~]			[]				[users]
  					[list]								[]				[]			[]				[projectrequests]
  					[get list]							[]				[]			[]				[clusterroles]
  					[list]								[]				[]			[]				[projects]
  					[create]							[]				IsPersonalSubjectAccessReview	[]			[]				[localsubjectaccessreviews subjectaccessreviews]
  cluster-admin				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[*]								[]				[]			[*]				[*]
  					[*]								[*]				[]			[]				[]
  cluster-reader				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get list watch]						[]				[]			[]				[bindings buildconfigs buildconfigs/instantiate buildconfigs/instantiatebinary buildconfigs/webhooks buildlogs builds builds/clone builds/details builds/log clusternetworks clusterpolicies clusterpolicybindings clusterrolebindings clusterroles configmaps deploymentconfigrollbacks deploymentconfigs deploymentconfigs/log deploymentconfigs/scale deployments endpoints events generatedeploymentconfigs groups hostsubnets identities images imagestreamimages imagestreamimports imagestreammappings imagestreams imagestreams/status imagestreamtags limitranges localresourceaccessreviews localsubjectaccessreviews minions namespaces netnamespaces nodes oauthclientauthorizations oauthclients persistentvolumeclaims persistentvolumes pods pods/log policies policybindings processedtemplates projectrequests projects replicationcontrollers resourceaccessreviews resourcequotas resourcequotausages rolebindings roles routes routes/status securitycontextconstraints serviceaccounts services subjectaccessreviews templateconfigs templates useridentitymappings users]
  					[get list watch]						[]				[]			[autoscaling]			[horizontalpodautoscalers]
  					[get list watch]						[]				[]			[batch]				[jobs]
  					[get list watch]						[]				[]			[extensions]			[daemonsets horizontalpodautoscalers jobs replicationcontrollers/scale]
  					[create]							[]				[]			[]				[resourceaccessreviews subjectaccessreviews]
  					[get]								[]				[]			[]				[nodes/metrics]
  					[create get]							[]				[]			[]				[nodes/stats]
  					[get]								[*]				[]			[]				[]
  cluster-status				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get]								[/api /api/* /apis /apis/* /healthz /healthz/* /oapi /oapi/* /osapi /osapi/ /version]					[]			[]		[]
  edit					Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[create delete deletecollection get list patch update watch]	[]				[]			[]				[configmaps endpoints persistentvolumeclaims pods pods/attach pods/exec pods/log pods/portforward pods/proxy replicationcontrollers replicationcontrollers/scale secrets serviceaccounts services services/proxy]
  					[create delete deletecollection get list patch update watch]	[]				[]			[]				[buildconfigs buildconfigs/instantiate buildconfigs/instantiatebinary buildconfigs/webhooks buildlogs builds builds/clone builds/custom builds/docker builds/log builds/source deploymentconfigrollbacks deploymentconfigs deploymentconfigs/log deploymentconfigs/scale deployments generatedeploymentconfigs imagestreamimages imagestreamimports imagestreammappings imagestreams imagestreams/secrets imagestreamtags processedtemplates routes templateconfigs templates]
  					[create delete deletecollection get list patch update watch]	[]				[]			[autoscaling]			[horizontalpodautoscalers]
  					[create delete deletecollection get list patch update watch]	[]				[]			[batch]				[jobs]
  					[create delete deletecollection get list patch update watch]	[]				[]			[extensions]			[daemonsets horizontalpodautoscalers jobs replicationcontrollers/scale]
  					[get list watch]						[]				[]			[]				[bindings configmaps endpoints events imagestreams/status limitranges minions namespaces namespaces/status nodes persistentvolumeclaims persistentvolumes pods pods/log pods/status projects replicationcontrollers replicationcontrollers/status resourcequotas resourcequotas/status resourcequotausages routes/status securitycontextconstraints serviceaccounts services]
  					[get update]							[]				[]			[]				[imagestreams/layers]
  registry-admin				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[create delete deletecollection get list patch update watch]	[]				[]			[]				[imagestreamimages imagestreamimports imagestreammappings imagestreams imagestreams/secrets imagestreamtags]
  					[create delete deletecollection get list patch update watch]	[]				[]			[]				[localresourceaccessreviews localsubjectaccessreviews resourceaccessreviews rolebindings roles subjectaccessreviews]
  					[get update]							[]				[]			[]				[imagestreams/layers]
  					[get list watch]						[]				[]			[]				[policies policybindings]
  					[get]								[]				[]			[]				[namespaces projects]
  registry-editor				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get]								[]				[]			[]				[namespaces projects]
  					[create delete deletecollection get list patch update watch]	[]				[]			[]				[imagestreamimages imagestreamimports imagestreammappings imagestreams imagestreams/secrets imagestreamtags]
  					[get update]							[]				[]			[]				[imagestreams/layers]
  registry-viewer				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get list watch]						[]				[]			[]				[imagestreamimages imagestreamimports imagestreammappings imagestreams imagestreamtags]
  					[get]								[]				[]			[]				[imagestreams/layers namespaces projects]
  self-provisioner			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[create]							[]				[]			[]				[projectrequests]
  system:build-controller			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get list watch]						[]				[]			[]				[builds]
  					[update]							[]				[]			[]				[builds]
  					[create]							[]				[]			[]				[builds/custom builds/docker builds/source]
  					[get]								[]				[]			[]				[imagestreams]
  					[create delete get list]					[]				[]			[]				[pods]
  					[create patch update]						[]				[]			[]				[events]
  system:daemonset-controller		Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[list watch]							[]				[]			[extensions]			[daemonsets]
  					[list watch]							[]				[]			[]				[pods]
  					[list watch]							[]				[]			[]				[nodes]
  					[update]							[]				[]			[extensions]			[daemonsets/status]
  					[create delete]							[]				[]			[]				[pods]
  					[create]							[]				[]			[]				[pods/binding]
  					[create patch update]						[]				[]			[]				[events]
  system:deployer				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get list]							[]				[]			[]				[replicationcontrollers]
  					[get update]							[]				[]			[]				[replicationcontrollers]
  					[create get list watch]						[]				[]			[]				[pods]
  					[get]								[]				[]			[]				[pods/log]
  					[update]							[]				[]			[]				[imagestreamtags]
  system:deployment-controller		Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[list watch]							[]				[]			[]				[replicationcontrollers]
  					[get update]							[]				[]			[]				[replicationcontrollers]
  					[create delete get list update]					[]				[]			[]				[pods]
  					[create patch update]						[]				[]			[]				[events]
  system:discovery			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get]								[/api /api/* /apis /apis/* /oapi /oapi/* /osapi /osapi/ /version]							[]			[]			[]
  system:hpa-controller			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get list watch]						[]				[]			[extensions autoscaling]	[horizontalpodautoscalers]
  					[update]							[]				[]			[extensions autoscaling]	[horizontalpodautoscalers/status]
  					[get update]							[]				[]			[extensions ]			[replicationcontrollers/scale]
  					[get update]							[]				[]			[]				[deploymentconfigs/scale]
  					[create patch update]						[]				[]			[]				[events]
  					[list]								[]				[]			[]				[pods]
  					[proxy]								[]				[https:heapster:]	[]				[services]
  system:image-builder			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get update]							[]				[]			[]				[imagestreams/layers]
  					[update]							[]				[]			[]				[builds/details]
  system:image-pruner			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[delete]							[]				[]			[]				[images]
  					[get list]							[]				[]			[]				[buildconfigs builds deploymentconfigs images imagestreams pods replicationcontrollers]
  					[update]							[]				[]			[]				[imagestreams/status]
  system:image-puller			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get]								[]				[]			[]				[imagestreams/layers]
  system:image-pusher			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get update]							[]				[]			[]				[imagestreams/layers]
  system:job-controller			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[list watch]							[]				[]			[extensions batch]		[jobs]
  					[update]							[]				[]			[extensions batch]		[jobs/status]
  					[list watch]							[]				[]			[]				[pods]
  					[create delete]							[]				[]			[]				[pods]
  					[create patch update]						[]				[]			[]				[events]
  system:master				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[*]								[]				[]			[*]				[*]
  system:namespace-controller		Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[delete get list watch]						[]				[]			[]				[namespaces]
  					[update]							[]				[]			[]				[namespaces/finalize namespaces/status]
  					[delete deletecollection get list]				[]				[]			[*]				[*]
  system:node				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[create]							[]				[]			[]				[localsubjectaccessreviews subjectaccessreviews]
  					[get list watch]						[]				[]			[]				[services]
  					[create get list watch]						[]				[]			[]				[nodes]
  					[update]							[]				[]			[]				[nodes/status]
  					[create patch update]						[]				[]			[]				[events]
  					[get list watch]						[]				[]			[]				[pods]
  					[create delete get]						[]				[]			[]				[pods]
  					[update]							[]				[]			[]				[pods/status]
  					[get]								[]				[]			[]				[configmaps secrets]
  					[get]								[]				[]			[]				[persistentvolumeclaims persistentvolumes]
  					[get]								[]				[]			[]				[endpoints]
  system:node-admin			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get list watch]						[]				[]			[]				[nodes]
  					[proxy]								[]				[]			[]				[nodes]
  					[*]								[]				[]			[]				[nodes/log nodes/metrics nodes/proxy nodes/stats]
  system:node-proxier			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[list watch]							[]				[]			[]				[endpoints services]
  system:node-reader			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get list watch]						[]				[]			[]				[nodes]
  					[get]								[]				[]			[]				[nodes/metrics]
  					[create get]							[]				[]			[]				[nodes/stats]
  system:oauth-token-deleter		Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[delete]							[]				[]			[]				[oauthaccesstokens oauthauthorizetokens]
  system:pv-binder-controller		Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[list watch]							[]				[]			[]				[persistentvolumes]
  					[create delete get update]					[]				[]			[]				[persistentvolumes]
  					[update]							[]				[]			[]				[persistentvolumes/status]
  					[list watch]							[]				[]			[]				[persistentvolumeclaims]
  					[get update]							[]				[]			[]				[persistentvolumeclaims]
  					[update]							[]				[]			[]				[persistentvolumeclaims/status]
  system:pv-provisioner-controller	Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[list watch]							[]				[]			[]				[persistentvolumes]
  					[create delete get update]					[]				[]			[]				[persistentvolumes]
  					[update]							[]				[]			[]				[persistentvolumes/status]
  					[list watch]							[]				[]			[]				[persistentvolumeclaims]
  					[get update]							[]				[]			[]				[persistentvolumeclaims]
  					[update]							[]				[]			[]				[persistentvolumeclaims/status]
  system:pv-recycler-controller		Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[list watch]							[]				[]			[]				[persistentvolumes]
  					[create delete get update]					[]				[]			[]				[persistentvolumes]
  					[update]							[]				[]			[]				[persistentvolumes/status]
  					[list watch]							[]				[]			[]				[persistentvolumeclaims]
  					[get update]							[]				[]			[]				[persistentvolumeclaims]
  					[update]							[]				[]			[]				[persistentvolumeclaims/status]
  					[list watch]							[]				[]			[]				[pods]
  					[create delete get]						[]				[]			[]				[pods]
  					[create patch update]						[]				[]			[]				[events]
  system:registry				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[delete get]							[]				[]			[]				[images]
  					[get]								[]				[]			[]				[imagestreamimages imagestreams imagestreams/secrets imagestreamtags]
  					[update]							[]				[]			[]				[imagestreams]
  					[create]							[]				[]			[]				[imagestreammappings]
  					[list]								[]				[]			[]				[resourcequotas]
  system:replication-controller		Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[list watch]							[]				[]			[]				[replicationcontrollers]
  					[get update]							[]				[]			[]				[replicationcontrollers]
  					[update]							[]				[]			[]				[replicationcontrollers/status]
  					[list watch]							[]				[]			[]				[pods]
  					[create delete]							[]				[]			[]				[pods]
  					[create patch update]						[]				[]			[]				[events]
  system:router				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[list watch]							[]				[]			[]				[endpoints routes]
  					[update]							[]				[]			[]				[routes/status]
  system:sdn-manager			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[create delete get list watch]					[]				[]			[]				[hostsubnets]
  					[create delete get list watch]					[]				[]			[]				[netnamespaces]
  					[get list watch]						[]				[]			[]				[nodes]
  					[create get]							[]				[]			[]				[clusternetworks]
  system:sdn-reader			Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get list watch]						[]				[]			[]				[hostsubnets]
  					[get list watch]						[]				[]			[]				[netnamespaces]
  					[get list watch]						[]				[]			[]				[nodes]
  					[get]								[]				[]			[]				[clusternetworks]
  					[get list watch]						[]				[]			[]				[namespaces]
  system:webhook				Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[create get]							[]				[]			[]				[buildconfigs/webhooks]
  view					Verbs								Non-Resource URLs		Extension			Resource Names		API Groups			Resources
  					[get list watch]						[]				[]			[]				[bindings buildconfigs buildconfigs/instantiate buildconfigs/instantiatebinary buildconfigs/webhooks buildlogs builds builds/clone builds/log configmaps deploymentconfigrollbacks deploymentconfigs deploymentconfigs/log deploymentconfigs/scale deployments endpoints events generatedeploymentconfigs imagestreamimages imagestreamimports imagestreammappings imagestreams imagestreams/status imagestreamtags limitranges minions namespaces namespaces/status nodes persistentvolumeclaims persistentvolumes pods pods/log pods/status processedtemplates projects replicationcontrollers replicationcontrollers/status resourcequotas resourcequotas/status resourcequotausages routes routes/status securitycontextconstraints serviceaccounts services templateconfigs templates]
  					[get list watch]						[]				[]			[autoscaling]			[horizontalpodautoscalers]
  					[get list watch]						[]				[]			[batch]				[jobs]
  					[get list watch]						[]				[]			[extensions]			[daemonsets horizontalpodautoscalers jobs]
  ----
  ====
  
  