kubectl create role
kubectl create role <name> --verb=<verbs> --resource=<things> [-n ns]
Risk: Careful
What it does
Makes a job card: which verbs on which things, in one zone.
When to use it
To give a person or bot a small set of rights.
Example
$ kubectl create role deployer --verb=get,list,patch --resource=deploymentsA card for reading and patching Deployments.
$ kubectl create clusterrole node-reader --verb=get,list --resource=nodesA card for every zone, and things with no zone.
Learn it in: RBAC: roles and bindings · Official docs