Kubetier
← Permission Reference
T3

create selfsubjectreviews

Inspect the authenticated user info Kubernetes sees for the current request via SelfSubjectReview.

Useful for identity reconnaissance, not an escalation primitive by itself.

API Group
authentication.k8s.io
Scope
cluster
Audit Level
Metadata

Included in Built-in Roles

K8s docs ↗