hi folks, quick question regarding the following scenario: 1. We create projects in clusters using API calls from our self-service platform 2. After project creation, we add the requesting user as a project owner by creating a

ProjectRoleTemplateBinding

referencing their

userId

as well as the

ProjectRoleTemplate/project-owner

, also via API. 3. The requesting user can access their project, create namespaces etc. BUT cannot add other users to their project. Is this intended behaviour? Does that mean that only cluster admins are able to add members to any given project, but

project-owners

are not, unless they are ALSO cluster/gobal admin at the same time?