RBAC Permission Analyzer

A Role or ClusterRole grants permissions through rules. The RBAC Permission Analyzer parses a pasted Role/ClusterRole and summarizes each rule - the API groups, resources and verbs it allows - so you can quickly see what a subject would be able to do.

Wildcard grants (apiGroups/resources/verbs of "*") are flagged as broad. The parser is a small tolerant YAML reader (no external dependency) that handles the block-style manifests produced by kubectl. Nothing is uploaded.

• Rule summary - apiGroups, resources, verbs per rule.
• Wildcard flags - "*" grants highlighted as broad.
• Role + ClusterRole - both supported.
• Paste input - no upload, fully local.
• Copy / Download / Print - take the summary anywhere.

1. Paste a Role or ClusterRole YAML.
2. Run the analysis and read the per-rule summary.
3. Copy or download the result.

Example 1 - reader. pods/configmaps get,list,watch.

Example 2 - wildcard. verbs: ["*"] flagged as broad.

• Clarity - see exactly what is granted.
• Safety signal - wildcards flagged.
• Private - all in the browser.
• Fast - instant client-side analysis.
• Copy, download or print - take it anywhere.