> Rancher Monitoring RBAC / Access Issue
>
...
# generale
elegant-truck-75829
10/06/2025, 2:11 PMRancher Monitoring RBAC / Access Issue
We have a shared RKE2 cluster managed through Rancher with two separate projects: ProjectA and ProjectB.
Each project has its own namespaces and standard users — users from ProjectA should not see anything from ProjectB, and vice versa.
Currently:
Only the cluster admin can view Rancher Monitoring (Grafana/Prometheus metrics).
Standard users in ProjectA cannot access the monitoring dashboards.
If I assign the “View All Projects” cluster permission, monitoring becomes accessible — but then users can also see ProjectB resources, which breaks isolation.
Question:
How can I grant ProjectA users access to Rancher Monitoring dashboards only for ProjectA’s namespaces, without giving “View All Projects” permission?
elegant-truck-75829
10/06/2025, 7:51 PMcc: @bland-article-62755 please advice if you have any inputs
b
bland-article-62755
10/06/2025, 8:14 PMlol why are you pinging me? I have no idea.
bland-article-62755
10/06/2025, 8:16 PMMaybe one of the Suse peeps can chime in, but this is all community support so it might be a while.
bland-article-62755
10/06/2025, 8:17 PMYou could also open a ticket in github if you think it's a bug (or want a feature request)
b
best-appointment-66450
10/07/2025, 7:36 AMYou can limit access by assigning namespace(s) to a project, then set up Cluster and Project Members. For looking at monitoring, you can assign View Monitoring to a group/user.
b
bland-article-62755
10/07/2025, 2:22 PMI think they're indicating that they do all that, but via the monitoring all namespaces are viewable and not restricted to the ones they have access to.