This message was deleted.

Yeah so you'll need to use ClusterRoles and ClusterRolebindings vs Roles and RoleBindings

I meant the rancher Role Templates, those are projected into K8s RBAC, but I wonder, if you can create the cluster role via the template as described here: https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/authentication-permiss[…]e-based-access-control-rbac/cluster-and-project-roles

to confirm, you have gone to users and auth --> role templates --> clusters tab and created a role there, then added the target user / group as a member of that cluster with that role?

ah, yes, this is correct, thank you. I wondered, if create-ns role is under Project/Namespace and it is actually clustrescope role, then if I can create the same Project/Namespace clusterwide role.