Hi, Is there an easy way to debug RBAC? I'm running into an issue where I can't create a namespace in a project. I'm assigned a custom cluster role and the project owner. When trying to create a namespace in the project I get the following error

admission webhook "<http://rancher.cattle.io|rancher.cattle.io>.namespaces.create-non-kubesystem" denied the request: Unauthorized

but can't figure out which permission I am exactly missing.. The rancher-webhook is not giving me much additional information (even with the debug flag enabled).