<p>Who has access to open pod terminals through the openshift web console? What permissions need to be given for this?</p>

<p>Any user that has <code>edit</code> or <code>admin</code> role in the project which the application is running in, can create a terminal session for pods running in that project.</p>

<pre><code>oc adm policy add-role-to-user edit &lt;collaborator&gt;
</code></pre>

<p>The purpose of the different roles you can grant are:</p>

<ul>
<li>admin - A project manager. The user will have rights to view any resource in the project and modify any resource in the project except for quota. A user with this role for a project will be able to delete the project.</li>
<li>edit - A user that can modify most objects in a project, but does not have the power to view or modify roles or bindings. A user with this role can create and delete applications in the project.</li>
<li>view - A user who cannot make any modifications, but can see most objects in a project.</li>
</ul>

<p>A user with <code>view</code> role cannot create a terminal session as that would mean they could modify things.</p>
