That is a good point; we do use Rancher. Let me experiment with giving just project level access. Will that also work with Fleet targets?

You as the sysadmin should control fleet configuration. A user that can create gitrepos in fleet is considered a privileged user.

Thank you, I am still learning and figuring things out. Is there still a master-class type sessions that happens where I can learn more on fleet?