ATP, I do not know what I'm missing or doing wrong. I was trying to setup some user access to only Grafana dashboards in rancher. but its turn out to be almost impossible (or i haven't find-out a way yet) users who have no access to list anything in cluster via

launch kubectl

, still able to get a shall to pods via rancher UI.