Subject

Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.

Resource Structure

Interactive Tree

groupobject

`group` matches based on user group name.

kindstringRequired

`kind` indicates which one of the other fields is non-empty. Required

serviceAccountobject

`serviceAccount` matches ServiceAccounts.

userobject

`user` matches based on username.