How can I give a user permission to perform actions on all projects on a single cluster? I've tried applying the existing roles to a user but they get limited access or too much access (can create clusters etc)

You could add them as a project member to each of the projects