This message was deleted.

Maybe I am misunderstanding your question... If your CRD is namespaced (and not cluster-scoped) you can create a project within your cluster, and grant this user project-admin

@hundreds-evening-84071 well the user gets this message: Error: rendered manifests contain a resource that already exists. Unable to continue with install: could not get information about the resource ClusterRole "pmm" in namespace "": clusterroles.rbac.authorization.k8s.io "pmm" is forbidden: User "<user> cannot get resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope. It seems like the user does not have all the correct permissions.