Hi, after upgrading rancher to 2.7.10 (from 2.7.9) one of my downstream RKE clusters is failing with

User u-xxxx cannot get resource "clusters" in API Group "management.cattle.io" at the cluster scope

So, somewhere one or more crb's suddenly are gone. Does anyone know which clusterroles is needed to get cluster synced again? EDIT: the cattle-globalrole-user crb was missing, but now permissions to API Group rbac.authorization.k8s.io and permissions to ns cattle-system is missing. Probably have to add these manually to get thinks in sync.