Empirically got the answer to my earlier question as so: https://rancher-users.slack.com/archives/C3ASABBD1/p1704290385659089 - it seems that if I log into Rancher webUI and go to the cluster, then use the "Download KubeConfig" link at the top, I get a kubeconfig file for the user that I have logged in as, which uses the Rancher server as a proxy for accessing the downstream cluster. Now I have to modify the permissions for the user, as far as allowing some rights to do things that are not a part of the built-in "cluster-member" and "project-member" roles. It does not seem that I can modify these built-in roles, but then how to extend them with additional rights if I want that? Also, is it supported to use

kubectl

outside of Rancher UI using the kubeconfig downloaded from Rancher for the user (would think so, but thought I'd officially ask here...)