Am I missing something? Does Rancher not provide the ability to “admin” a cluster in the sense that you can install a new cluster, and then provision users, those users can login to their namespace of the cluster and deploy applications?

you must be, as rancher does provide that ability.