<p>I'm trying to configure RBAC for argocd, I saw a lot of examples like this one below:</p>
<pre><code>apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-rbac-cm
  namespace: argocd
data:
  policy.default: role:readonly
  policy.csv: |
    p, role:org-admin, applications, *, */*, allow
    p, role:org-admin, clusters, get, *, allow
    p, role:org-admin, repositories, get, *, allow
    p, role:org-admin, repositories, create, *, allow
    p, role:org-admin, repositories, update, *, allow
    p, role:org-admin, repositories, delete, *, allow
    p, role:org-admin, logs, get, *, allow
    p, role:org-admin, exec, create, */*, allow

    g, your-github-org:your-team, role:org-admin
</code></pre>
<p>In the first column you either have the <code>g</code> or <code>p</code> letters.<br />
Tried searching for the definition on <a href="https://argo-cd.readthedocs.io/en/stable/operator-manual/rbac/#:%7E:text=The%20RBAC%20feature%20enables%20restriction,or%20more%20local%20users%20setup." rel="nofollow noreferrer">ArgoCD Documentation</a>, but either they don't mention it or I just failed to see it.</p>
<p>So what does this <code>p</code> and <code>g</code> stand for?</p>

Alex Weitz
<p>I would guess p=Permission, g=Group.
p is what permission the role have.
g is which role this group have</p>
