A RoleBinding grants the permissions defined by a Role to users, groups, or service accounts within the RoleBinding’s namespace. Roles define permissions but do not assign them; the binding performs that assignment. section 3.2.6
Understand RoleBinding through its scope and relationship to other RBAC resources:
- A RoleBinding created in a namespace can assign permissions only within that namespace. section 3.2.6
- A RoleBinding can bind either a namespace-scoped Role or a ClusterRole used at namespace scope. section 3.2.6
- A ClusterRoleBinding provides the contrasting cluster-wide binding scope. section 3.2.6
Table 3.7 Binding types and their scopes (view table figure)
| Can be used to assign permissions only in the namespace in which it was created |
||
Compare RoleBinding and ClusterRoleBinding by scope and permission-assignment behavior. section 3.2.6


