There might be a way to do so with a custom role that inherits from the Read-Only project role and then specify the desired verbs for the cronjob resource.
boundless-holiday-25338
08/14/2023, 7:23 PM
Saving this role would then populate it when you edit a Project and add/remove users. Note that this is strictly for the project/namespace scope.