anchor.diff:  						Groups:	[system:authenticated system:unauthenticated]
   ----
   ====
  +
   
   [[viewing-local-policy]]
   
  
positive.code: [options="nowrap"]
  ----
  $ oc describe clusterPolicy default
  Name:				default
  Created:			4 hours ago
  Labels:				<none>
  Last Modified:			2015-06-10 17:22:25 +0000 UTC
  admin				Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[create delete get list update watch]	[pods/proxy projects resourcegroup:exposedkube resourcegroup:exposedopenshift resourcegroup:granter secrets]				[][]
  				[get list watch]			[pods/exec pods/portforward resourcegroup:allkube resourcegroup:allkube-status resourcegroup:allopenshift-status resourcegroup:policy]	[][]
  				[get update]				[imagestreams/layers]															[][]
  basic-user			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get]					[users]																	[~][]
  				[list]					[projectrequests]															[][]
  				[get list]				[clusterroles]																[][]
  				[list]					[projects]																[][]
  				[create]				[subjectaccessreviews]															[][]						IsPersonalSubjectAccessReview
  cluster-admin			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[*]					[*]																	[][]
  				[*]					[]																	[][*]
  cluster-reader			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get list watch]			[*]																	[][]
  				[get]					[]																	[][*]
  cluster-status			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get]					[]																	[][/api /healthz /healthz/* /osapi /version]
  edit				Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[create delete get list update watch]	[pods/proxy resourcegroup:exposedkube resourcegroup:exposedopenshift secrets]								[][]
  				[get list watch]			[pods/exec pods/portforward projects resourcegroup:allkube resourcegroup:allkube-status resourcegroup:allopenshift-status]		[][]
  registry-admin			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[create delete deletecollection get list patch update watch]	[imagestreamimages imagestreamimports imagestreammappings imagestreams imagestreams/secrets imagestreamtags]	[][]
  				[create delete deletecollection get list patch update watch]	[localresourceaccessreviews localsubjectaccessreviews resourceaccessreviews rolebindings roles subjectaccessreviews]	[][]
  				[get update]				[imagestreams/layers]															[][]
  				[get list watch]			[policies policybindings]														[][]
  				[get]					[namespaces projects]															[][]
  registry-editor			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get]					[namespaces projects]															[][]
  				[create delete deletecollection get list patch update watch]	[imagestreamimages imagestreamimports imagestreammappings imagestreams imagestreams/secrets imagestreamtags]	[][]
  				[get update]				[imagestreams/layers]															[][]
  registry-viewer			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get list watch]			[imagestreamimages imagestreamimports imagestreammappings imagestreams imagestreamtags]							[][]
  				[get]					[imagestreams/layers namespaces projects]												[][]
  self-provisioner		Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[create]				[projectrequests]															[][]
  system:build-controller		Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get list watch]			[builds]																[][]
  				[update]				[builds]																[][]
  				[get]					[imagestreams]																[][]
  				[create delete get list]		[pods]																	[][]
  				[create update]				[events]																[][]
  system:component		Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[*]					[*]																	[][]
  system:deployer			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get list]				[replicationcontrollers]														[][]
  				[get update]				[replicationcontrollers]														[][]
  				[create get list watch]			[pods]																	[][]
  system:deployment-controller	Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[list watch]				[replicationcontrollers]														[][]
  				[get update]				[replicationcontrollers]														[][]
  				[create delete get list update]		[pods]																	[][]
  				[create update]				[events]																[][]
  system:image-builder		Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get update]				[imagestreams/layers]															[][]
  system:image-pruner		Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[delete]				[images]																[][]
  				[get list]				[buildconfigs builds deploymentconfigs images imagestreams pods replicationcontrollers]							[][]
  				[update]				[imagestreams/status]															[][]
  system:image-puller		Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get]					[imagestreams/layers]															[][]
  system:node			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get list watch]			[services]																[][]
  				[create get list watch]			[nodes]																	[][]
  				[update]				[nodes/status]																[][]
  				[create update]				[events]																[][]
  				[get list watch]			[pods]																	[][]
  				[create delete get]			[pods]																	[][]
  				[update]				[pods/status]																[][]
  				[get]					[secrets]																[][]
  				[get]					[persistentvolumeclaims persistentvolumes]												[][]
  				[get]					[endpoints]																[][]
  system:node-proxier		Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[list watch]				[endpoints services]															[][]
  system:oauth-token-deleter	Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[delete]				[oauthaccesstokens oauthauthorizetokens]												[][]
  system:registry			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[delete get]				[images]																[][]
  				[get]					[imagestreamimages imagestreams imagestreamtags]											[][]
  				[update]				[imagestreams]																[][]
  				[create]				[imagestreammappings]															[][]
  system:replication-controller	Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[list watch]				[replicationcontrollers]														[][]
  				[get update]				[replicationcontrollers]														[][]
  				[list watch]				[pods]																	[][]
  				[create delete]				[pods]																	[][]
  				[create update]				[events]																[][]
  system:router			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[list watch]				[endpoints routes]															[][]
  system:sdn-manager		Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[create delete get list watch]		[hostsubnets]																[][]
  				[get list watch]			[nodes]																	[][]
  				[create get]				[clusternetworks]															[][]
  system:sdn-reader		Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get list watch]			[hostsubnets]																[][]
  				[get list watch]			[nodes]																	[][]
  				[get]					[clusternetworks]															[][]
  system:webhook			Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[create get]				[buildconfigs/webhooks]															[][]
  view				Verbs					Resources																Resource Names	Non-Resource URLs				Extension
  				[get list watch]			[projects resourcegroup:allkube resourcegroup:allkube-status resourcegroup:allopenshift-status resourcegroup:exposedopenshift]		[][]
  ----
  ====
  
  
negative.code: ----
  $ oc describe clusterPolicyBindings :default
  ----
  
  
  [[viewing-cluster-bindings]]
  .Viewing Cluster Bindings
  