<p>For example I have a role that gives permission to user get list of pods from specific namespace. And I have a clusterRole that gives permission to user get list of pods from all namespaces.</p>
<p>can user get all pods from all namespaces? or does role override clusterRole because role is more specific?</p>
<p>I know this doesn't make sense.  But what if I do it by mistake?</p>

Murat Cabuk
<p>As per <a href="https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole" rel="nofollow noreferrer">https://kubernetes.io/docs/reference/access-authn-authz/rbac/#role-and-clusterrole</a></p>
<blockquote>
<p>Permissions are purely additive (there are no &quot;deny&quot; rules).</p>
</blockquote>
<p>That means you can't get less rights, only more if user is bound to multiple Roles or ClusterRoles</p>
