This message was deleted.

Are you talking of inside Rancher before going to a cluster? Identify the user group when they come in and assign specific groups to specific roles. In the clusters, do much the same with Cluster and Project Members, assigning permissions per project. We're using AD as an identifier, so the groups are set in that.

What I try is this: • Rancher installation has rancher-role-X as default • I create my own role paul-role-Z • I set my paul-role-Z as default • ... • Rancher sets its rancher-role-X back to default It's unclear why this happens.