Hi all, I'm looking for a role template definition that allows a restricted user to import manifest via Rancher UI (see attached image). Does anybody have any idea which resource I need to include in the Role Template definition please ? FYI below is my Role Template definition :

administrative: false
apiVersion: <http://management.cattle.io/v3|management.cattle.io/v3>
builtin: false
clusterCreatorDefault: false
context: project
description: "Default tenant role attached to a project"
displayName: project-default-role
external: false
hidden: false
kind: RoleTemplate
locked: false
metadata:
  finalizers:
    - <http://controller.cattle.io/mgmt-auth-roletemplate-lifecycle|controller.cattle.io/mgmt-auth-roletemplate-lifecycle>
  labels:
    <http://cattle.io/creator|cattle.io/creator>: norman
  name: project-default-role
projectCreatorDefault: false
roleTemplateNames: []
rules:
  - apiGroups:
      - ''
    nonResourceURLs: []
    resourceNames: []
    resources:
      - namespaces
    verbs:
      - get
  - apiGroups:
      - apps
    nonResourceURLs: []
    resourceNames: []
    resources:
      - deployments
    verbs:
      - create
      - delete
      - list
      - update
  - apiGroups:
      - ''
    nonResourceURLs: []
    resourceNames: []
    resources:
      - pods
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - ''
    nonResourceURLs: []
    resourceNames: []
    resources:
      - services
    verbs:
      - list
      - create
      - delete
      - update
  - apiGroups:
      - <http://events.k8s.io|events.k8s.io>
    nonResourceURLs: []
    resourceNames: []
    resources:
      - events
    verbs:
      - list
  ########################
  # Add here an apiGroup that allow user to import manifest
  ......

Thanks in advance ! 🙂