> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pastures.farm/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Control

> RBAC management for Roles, ClusterRoles, and their bindings with filterable tables.

The Access Control page provides a management interface for Kubernetes RBAC resources, organized into tabs by resource type.

<Info>
  This page is demo-only — no Engine API calls are made. All data is synthetic.
</Info>

## Tabs

<Tabs>
  <Tab title="Roles">
    Namespace-scoped roles with their associated rules. The table shows role name, namespace, creation date, and rule count.
  </Tab>

  <Tab title="ClusterRoles">
    Cluster-scoped roles that apply across all namespaces. The table shows role name, creation date, rule count, and whether the role is aggregated.
  </Tab>

  <Tab title="RoleBindings">
    Bindings that grant a Role to subjects within a namespace. Columns include binding name, namespace, role reference, subjects, and creation date.
  </Tab>

  <Tab title="ClusterRoleBindings">
    Bindings that grant a ClusterRole to subjects cluster-wide. Columns include binding name, role reference, subjects, and creation date.
  </Tab>
</Tabs>

All tables support **text filtering** to narrow results by name, namespace, or subject.

## Create Binding modal

Click **Create Binding** to add a new RoleBinding or ClusterRoleBinding. The modal fields:

* **Binding type** — RoleBinding or ClusterRoleBinding
* **Name** — binding resource name
* **Namespace** — target namespace (RoleBinding only)
* **Role reference** — select from existing Roles or ClusterRoles
* **Subject type** — User, Group, or ServiceAccount
* **Subject name** — the identity to bind

## Demo data

The following roles are pre-populated in demo mode:

| Role       | Type        | Description                                |
| ---------- | ----------- | ------------------------------------------ |
| admin      | ClusterRole | Full access to all resources               |
| developer  | ClusterRole | Read/write access to workloads and configs |
| auditor    | ClusterRole | Read-only access across all namespaces     |
| monitoring | ClusterRole | Access to monitoring and metrics resources |